🚀 go-pugleaf

In aus.computers.linux on Sun, 11 Dec 2011 09:13:40 +1100
Polly the Parrott <flatulantdingo@deadspam.com> wrote:
> On Sat, 10 Dec 2011 20:21:21 +0000 (UTC), Zebee Johnstone
><zebeej@gmail.com> wrote:
>
>>How about the firewall and routing stuff?  any luck there?
>
> Looks like a firewall issue.
>
> Running Gufw graphical firewall set up, allow all in, none out, except
> for 6881 for (cough cough) file transfers.
>
> When I turn firewall off in Gufw, no issues.

UNfortunately I don't use GUI firewall tools, I am a crusty old unix
admin...

I am also not particularly skilled with iptables, having not had to
mess with it for years.  (at work we have proper firewalls and at home
my ADSL whatsit does the job)

The stuff below looks reasonable from what I can tell, 

however...  the none out might be a problem.  Because well.. stuff has
to go out :)

I'd have thought you meant to put none in, all out?

You don't care what leaves the premises but you are very much
interested in what comes in.  Ideally you don't want anything coming
in you didn't ask for except those file transfers.  

Zebee

>
> Turn back on, same problems as before.
>
> However Iptables reads as follows:-
>
> Chain INPUT (policy ACCEPT)
> target     prot opt source               destination         
> ufw-before-logging-input  all  --  anywhere             anywhere
> ufw-before-input  all  --  anywhere             anywhere            
> ufw-after-input  all  --  anywhere             anywhere            
> ufw-after-logging-input  all  --  anywhere             anywhere
> ufw-reject-input  all  --  anywhere             anywhere            
> ufw-track-input  all  --  anywhere             anywhere            
>
> Chain FORWARD (policy DROP)
> target     prot opt source               destination         
> ufw-before-logging-forward  all  --  anywhere             anywhere
> ufw-before-forward  all  --  anywhere             anywhere            
> ufw-after-forward  all  --  anywhere             anywhere            
> ufw-after-logging-forward  all  --  anywhere             anywhere
> ufw-reject-forward  all  --  anywhere             anywhere            
>
> Chain OUTPUT (policy DROP)
> target     prot opt source               destination         
> ufw-before-logging-output  all  --  anywhere             anywhere
> ufw-before-output  all  --  anywhere             anywhere            
> ufw-after-output  all  --  anywhere             anywhere            
> ufw-after-logging-output  all  --  anywhere             anywhere
> ufw-reject-output  all  --  anywhere             anywhere            
> ufw-track-output  all  --  anywhere             anywhere            
>
> Chain ufw-after-forward (1 references)
> target     prot opt source               destination         
>
> Chain ufw-after-input (1 references)
> target     prot opt source               destination         
> ufw-skip-to-policy-input  udp  --  anywhere             anywhere udp
> dpt:netbios-ns 
> ufw-skip-to-policy-input  udp  --  anywhere             anywhere udp
> dpt:netbios-dgm 
> ufw-skip-to-policy-input  tcp  --  anywhere             anywhere tcp
> dpt:netbios-ssn 
> ufw-skip-to-policy-input  tcp  --  anywhere             anywhere tcp
> dpt:microsoft-ds 
> ufw-skip-to-policy-input  udp  --  anywhere             anywhere udp
> dpt:bootps 
> ufw-skip-to-policy-input  udp  --  anywhere             anywhere udp
> dpt:bootpc 
> ufw-skip-to-policy-input  all  --  anywhere             anywhere
> ADDRTYPE match dst-type BROADCAST 
>
> Chain ufw-after-logging-forward (1 references)
> target     prot opt source               destination         
> LOG        all  --  anywhere             anywhere            limit:
> avg 3/min burst 10 LOG level warning prefix `[UFW BLOCK] ' 
>
> Chain ufw-after-logging-input (1 references)
> target     prot opt source               destination         
>
> Chain ufw-after-logging-output (1 references)
> target     prot opt source               destination         
> LOG        all  --  anywhere             anywhere            limit:
> avg 3/min burst 10 LOG level warning prefix `[UFW BLOCK] ' 
>
> Chain ufw-after-output (1 references)
> target     prot opt source               destination         
>
> Chain ufw-before-forward (1 references)
> target     prot opt source               destination         
> ufw-user-forward  all  --  anywhere             anywhere            
>
> Chain ufw-before-input (1 references)
> target     prot opt source               destination         
> ACCEPT     all  --  anywhere             anywhere            
> ACCEPT     all  --  anywhere             anywhere            state
> RELATED,ESTABLISHED 
>
> I haven't touched the firewall set up at all, and being dumb at all of
> this, politely asking how to fix, please!
>
> And wondering what has gone wrong with Gufw?
>
>