Re: [gentoo-user] nfs and iptables

[Arnau Bria <arnau@emergetux.net>]

On Fri, 23 Jun 2006 12:38:13 +0300 (EEST)
"Daniel Iliev" <danny@ilievnet.com> wrote:

> 
> On Fri, June 23, 2006 12:04 pm, Arnau Bria wrote:
> 
[...]
> My first guess is that you have another FW rule which matches those
> packets and drops them before they meet the rule you mention.
> You could try:
> -D INPUT -d 193.146.196.198 -i eth0 -p tcp -m tcp --dport 111 -j
> ACCEPT
> -I INPUT -d 193.146.196.198 -i eth0 -p tcp -m tcp --dport 111 -j ACCEPT

Well, that was what I first tough, but this is my first rule:
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     udp  --  anywhere             my_host_name     udp dpt:sunrpc
ACCEPT     tcp  --  anywhere             my_host_name     tcp dpt:sunrpc
then ssh rule
then smtp rule
then the drop one I posted in first mail.

ssh and smtp works fine, and, I can telnet to 111!! that's really
strange, cause if I can telnet, it means I have my port open... so, why
when I try to mount, it's blocked by a later rule?

thanks!
-- 
Arnau Bria
http://blog.emergetux.net
"Flanders, de nada sirve rezar: yo mismo acabo de hacerlo y los dos 
no vamos a ganar"
~Homer J. Simpson~
-- 
gentoo-user@gentoo.org mailing list