[ale] iptables problem

Jim ale_nospam at fayettedigital.com
Thu Nov 23 12:07:56 EST 2006


I'm having trouble still getting the iptables set up.

What are these messages telling me?  I sort of thought I had ssh enabled 
both ways and the same for bootps which is 67 I think.

Nov 23 11:58:19 fdcga dhclient: DHCPREQUEST on eth0 to 67.18.92.17 port 67
Nov 23 11:58:19 fdcga dhclient: send_packet: Operation not permitted
Nov 23 11:58:19 fdcga kernel: RULE 9 -- DENY IN= OUT=eth0 
SRC=69.93.127.205 DST=67.18.92.17 LEN=328 TOS=0x00 PREC=0x00 TTL=64 ID=0 
DF PROTO=UDP SPT=68 DPT=67 LEN=308
Nov 23 11:58:23 fdcga kernel: RULE 9 -- DENY IN= OUT=eth0 
SRC=69.93.127.205 DST=69.61.66.106 LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=0 
DF PROTO=TCP SPT=1375 DPT=22 WINDOW=5840 RES=0x00 SYN URGP=0

extract from the iptables -L display
Chain Cid455E1AF011509.0 (1 references)
ACCEPT     tcp  --  anywhere             anywhere            tcp 
multiport dports www,ssh,https

Chain INPUT (policy DROP)
ACCEPT     icmp --  anywhere             anywhere            icmp 
destination-unreachable state NEW
ACCEPT     udp  --  anywhere             anywhere            udp 
dpt:bootps state NEW

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere            state 
RELATED,ESTABLISHED
In_RULE_0  all  --  fdcga.com            anywhere
RULE_9     all  --  anywhere             anywhere

Chain OUTPUT (policy DROP)
ACCEPT     udp  --  anywhere             fdcga.com           udp 
dpt:bootps state NEW

Chain RULE_9 (3 references)
target     prot opt source               destination
LOG        all  --  anywhere             anywhere            LOG level 
info prefix `RULE 9 -- DENY '
DROP       all  --  anywhere             anywhere


It's pretty big so I didn't want to put it all in an email.

Thanks for any assistance you might be able to give.  I'm using 
fwbuilder to generate these lines, otherwise I wouldn't be this far.

Jim.




More information about the Ale mailing list