[SlugBug] simple iptables question

Bill Best bill at commedia.org.uk
Mon Feb 2 10:30:54 GMT 2004


hi

i have a strange problem with iptables.

i have set-up a simple firewall on a server as below:

xxxxx:~# iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere      tcp flags:ACK/ACK
ACCEPT     all  --  anywhere             anywhere      state ESTABLISHED
ACCEPT     all  --  anywhere             anywhere      state RELATED
ACCEPT     all  --  anywhere             anywhere      tcp dpt:auth
ACCEPT     tcp  --  anywhere             anywhere      tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere      tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere      tcp dpt:www
DROP       all  --  anywhere             anywhere

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
xxxxx:~#

i can ssh to the machine but cannot access the webserver running on it 
via http or https.

i have scanned the machine from another address and these are the results:

Interesting ports on xxxxx:
(The 1652 ports scanned but not shown below are in state: filtered)
PORT      STATE  SERVICE
22/tcp    open   ssh
80/tcp    closed http
113/tcp   open   auth
443/tcp   closed https

Nmap run completed -- 1 IP address (1 host up) scanned in 72.653 seconds

any ideas why can't i open up http and https?

bill


More information about the SlugBug mailing list