Re: [PLUG] iptables

Cosmin Nicolaescu on 20 Apr 2005 15:02:03 -0000


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] iptables


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Wed, April 20, 2005 10:51 am, Jeff Abrahamson said:
> I have an iptables script that's giving me trouble. I'm hoping
> someone here can point me in the right direction. I've attached the
script for general feedback, but here are the two (current) problems:
>
> 1. I tried to say
>
> $IPTABLES -A INPUT -p udp,tcp --dport 123 -src $source -j ACCEPT
>
> but was obliged to change that to this to be understood:
>
> $IPTABLES -A INPUT -p udp --dport 123 -src $source -j ACCEPT
$IPTABLES -A INPUT -p tcp --dport 123 -src $source -j ACCEPT
>
> And then I still get errors:
>
> + /sbin/iptables -A INPUT -p udp --dport 123 -src
> admin.math.drexel.edu -j ACCEPT^M
> Bad argument `admin.math.drexel.edu'^M
> Try `iptables -h' or 'iptables --help' for more information.^M
>
>
> 2. My ssh session's X forwarding is blocked. Oops.
>
>
> Note that I haven't even set policy to deny...
>
> Thanks in advance for any help or suggestions.
>
> --
> Jeff
>
> Jeff Abrahamson <http://www.purple.com/jeff/> +1 215/837-2287 GPG
fingerprint: 1A1A BA95 D082 A558 A276 63C6 16BF 8C4C 0D1D AE4B
> ___________________________________________________________________________
Philadelphia Linux Users Group --
> http://www.phillylinux.org
> Announcements -
> http://lists.phillylinux.org/mailman/listinfo/plug-announce
> General Discussion --
> http://lists.phillylinux.org/mailman/listinfo/plug
>
Hello Jeff,
Regarding 1., the problem is syntax. If you want to use 'src' you have to
use '--src', but I just use '-s'.
About 2., what do you mean 'blocked' ? Is it blocked by a firewall, or do
you just not have X11Forwarding enabled (ssh -X or if you have openssh>3.8
you might want to use -Y to make sure Eterm or such don't just crash with
'Bad Atom' on you.
Hope this helps,
- -Cos
- --
Cosmin Nicolaescu
Systems Administrator
Drexel University
Computer Science Department
University Crossings Rm. 135
(267)-918-8505
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFCZm7dzJ8rDInR5JcRAtORAJwNsv/Nwtd1HXiXOjJoSbCyJG9O4ACgqKUN
LYCb1RylI45QNT3uY+KEZz8=
=zmOS
-----END PGP SIGNATURE-----
___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug



AltStyle によって変換されたページ (->オリジナル) /