RE: [cobalt-security] pmfirewall , IPCHAINS, CDONTS and mail forwarding

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Tue, 23 Apr 2002, Sean Ward wrote:
> Didn't work. Bummer.
> 
check  /etc/rc.d/init.d/pmfirewall  see if you have a couple lines like this....

     # These are open to sockets created by connections allowed by ipchains
     $IPCHAINS -A input -p tcp -s $REMOTENET -d $OUTERNET 1023:65535 -j ACCEPT
     $IPCHAINS -A input -p udp -s $REMOTENET -d $OUTERNET 1023:65535 -j ACCEPT

DNS may use high numbered ports, not just 53

Also, did I understand that your server is running on multiple IP addresses?
This may affect operation...
I remember someone a few months ago that had a problem with multiple IP
addresses...


--
Gerald Waugh
http://www.frontstreetnetworks.com
Front Street Networks LLC - 203-785-0699
229 Front Street, Ste. #C, New Haven CT, 06513-3203