Find the answer to your Linux question:
Results 1 to 3 of 3
have a router running debian linux here are my rules Code: ccooper@router:~$ cat /etc/iptables.up.rules # Generated by iptables-save v1.3.8 on Sun Jan 6 13:19:51 2008 *filter :FORWARD ACCEPT [0:0] :INPUT ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Linux Guru coopstah13's Avatar
    Join Date
    Nov 2007
    Location
    NH, USA
    Posts
    3,149

    Question firewall help


    have a router running debian linux

    here are my rules
    Code:
    ccooper@router:~$ cat /etc/iptables.up.rules 
    # Generated by iptables-save v1.3.8 on Sun Jan  6 13:19:51 2008
    *filter
    :FORWARD ACCEPT [0:0]
    :INPUT DROP [0:0]
    :OUTPUT ACCEPT [0:0]
    -A INPUT -i eth0 -j ACCEPT
    -A INPUT -i ath0 -j ACCEPT
    -A INPUT -i lo -j ACCEPT
    -A INPUT -m state -i eth1 --state ESTABLISHED,RELATED -j ACCEPT
    COMMIT
    # Completed on Sun Jan  6 13:19:51 2008
    # Generated by iptables-save v1.3.8 on Sun Jan  6 13:19:51 2008
    *mangle
    :PREROUTING ACCEPT [0:0]
    :INPUT ACCEPT [0:0]
    :FORWARD ACCEPT [0:0]
    :OUTPUT ACCEPT [0:0]
    :POSTROUTING ACCEPT [0:0]
    COMMIT
    # Completed on Sun Jan  6 13:19:51 2008
    # Generated by iptables-save v1.3.8 on Sun Jan  6 13:19:51 2008
    *nat
    :OUTPUT ACCEPT [0:0]
    :PREROUTING ACCEPT [0:0]
    :POSTROUTING ACCEPT [0:0]
    -A POSTROUTING -o eth1 -j MASQUERADE
    -A PREROUTING -p tcp -m tcp --dport 10699 -j DNAT --to-destination 192.168.0.254:10699
    -A PREROUTING -p udp -m udp --dport 10699 -j DNAT --to-destination 192.168.0.254:10699
    -A PREROUTING -p tcp -m tcp --dport 3724 -j DNAT --to-destination 192.168.0.254:3724
    -A PREROUTING -p tcp -m tcp --dport 6881:6999 -j DNAT --to-destination 192.168.0.254:6881-6999
    -A PREROUTING -p udp -m udp --dport 6881:6999 -j DNAT --to-destination 192.168.0.254:6881-6999
    COMMIT
    # Completed on Sun Jan  6 13:19:51 2008
    I am trying to download in bit torrent using azureus with my port 10699 being the download port and when I run the port tester, it says ok, but nothing will download, anyone know what I'm missing? I might have some routing issues actually as well

    Code:
    ccooper@router:~$ sudo route
    Kernel IP routing table
    Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
    192.168.1.0     *               255.255.255.0   U     0      0        0 ath0
    192.168.0.0     *               255.255.255.0   U     0      0        0 eth0
    24.128.208.0    *               255.255.248.0   U     0      0        0 eth1
    default         c-24-128-208-1. 0.0.0.0         UG    0      0        0 eth1

  2. #2
    Linux Guru coopstah13's Avatar
    Join Date
    Nov 2007
    Location
    NH, USA
    Posts
    3,149
    i check using tcpdump on the router box, shows the packets coming in are being forwarded to the right IP:Port, also on the machine taht I'm trying to download from I see the packets being received on the right port, no packets dropped by kernel on either machine...so confused, help please

  3. #3
    Linux Guru coopstah13's Avatar
    Join Date
    Nov 2007
    Location
    NH, USA
    Posts
    3,149
    VERY strange, if I use ktorrent, it works...annoying because I prefer azureus but if it doesn't work, then it doesn't work

  4. $spacer_open
    $spacer_close

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •