Re: [suse-security] iptables on SuSE 7.3, webserver and our intranet

[Andreas Baetz <lac01@xxxxxx>]

On Monday 31 March 2003 22:01, Manfred Rebentisch wrote:
> Hello,
> a customer of mine is using suse 7.3 and iptables v1.2.2.
> The iptables command are called direct, not with SuSEfirewall.
> Normally I use shorewall, I am not a specialist for iptables commands, I
> did not write the commands, but have to support them now.
>
> The server is an internet-webserver. Because of some attacs the firewall is
> important. There are a postfix E-Mail-Server and there are Websites on the
> Server. Accessing in no problem from the internet.
>
> BUT: from the intranet we cannot call the websites and load the E-Mails
> from the server. I think, it is not a DNS problem, but a firewall problem.
>...
> Which iptables command is nessacary for getting access from the intranet
> (172.21.85.0) to the webserver (172.21.85.11)?
Because I do not know your network layout and all the Firewall rules, just some
general tips to locate the problem:
- is the routing from your Intranet to your webserver ok ?
- you could place LOG targets in your ruleset to check where the packets get dropped

Andreas Baetz

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here