From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.62) (envelope-from ) id 1H7GAg-0005kj-GF for garchives@archives.gentoo.org; Wed, 17 Jan 2007 19:10:06 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.8/8.13.8) with SMTP id l0HJ8Bcm023268; Wed, 17 Jan 2007 19:08:11 GMT Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.225]) by robin.gentoo.org (8.13.8/8.13.8) with ESMTP id l0HJ2t75021690 for ; Wed, 17 Jan 2007 19:02:56 GMT Received: by wr-out-0506.google.com with SMTP id i28so662151wra for ; Wed, 17 Jan 2007 11:02:55 -0800 (PST) DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=beta; h=received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=CRZFUxL1Essehng4Opi0ljiUbAyiZpCBpGlPrk18nG4XqdeMCPWFtNM5XjKAw+rr2ydfVL+Lhl2TIYbzEDjw9MlInqqMvShY3k2riaCwy8Dz85FGudsMIuVkDuCxpyndNhQ1+ZsvutOmX7uaG0pqFGU1zaHJ4BAxltjiz0T76DI= Received: by 10.90.86.10 with SMTP id j10mr6578935agb.1169060574945; Wed, 17 Jan 2007 11:02:54 -0800 (PST) Received: by 10.90.56.8 with HTTP; Wed, 17 Jan 2007 11:02:54 -0800 (PST) Message-ID: <6142e6140701171102k39c734d6gec6a11ebc29abcbd@mail.gmail.com> Date: Wed, 17 Jan 2007 20:02:54 +0100 From: "Daniel Pielmeier" To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Setting up a home router In-Reply-To: <20070116152154.ceb108c4.hilse@web.de> Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <6142e6140701141127ke803445jb5d9a89f8fa523a@mail.gmail.com> <45AB4E14.1000406@ilievnet.com> <6142e6140701151017xa81c2e6k73e0a064575780f2@mail.gmail.com> <20070116001332.1ccbfb03.hilse@web.de> <6142e6140701151530g4eca995fhfe21396929a50b73@mail.gmail.com> <20070116014049.031f8e0f.hilse@web.de> <6142e6140701160003r1fcf996mf199bef9aa85ebdf@mail.gmail.com> <20070116121751.ba627364.hilse@web.de> <6142e6140701160410p1c91aa81i89455fcf46175b9f@mail.gmail.com> <20070116152154.ceb108c4.hilse@web.de> X-Archives-Salt: 43dc6eee-5846-4370-910e-42882a9bf283 X-Archives-Hash: 0abf8d8680d937c656e4a6c8fc706ec6 Hi again, it seems that i was running in another problem. This are my current iptables! Chain INPUT (policy ACCEPT) target prot opt source destination block all -- anywhere anywhere Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT all -- anywhere anywhere state NEW,RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere state NEW,RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED block all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain block (2 references) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere state NEW DROP all -- anywhere anywhere But everytime i start my internet connection with /etc/init.d/net.eth1 start it seems my rules were changed to this and i can't connect to the internet! Chain INPUT (policy ACCEPT) target prot opt source destination LOG udp -- anywhere anywhere udp dpts:0:1023 LOG level warning LOG tcp -- anywhere anywhere tcp dpts:0:1023 LOG level warning DROP udp -- anywhere anywhere udp dpts:0:1023 DROP tcp -- anywhere anywhere tcp dpts:0:1023 LOG tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN LOG level warning DROP tcp -- anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN DROP icmp -- anywhere anywhere icmp echo-request Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain block (0 references) target prot opt source destination ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED ACCEPT all -- anywhere anywhere state NEW DROP all -- anywhere anywhere What could be the problem here? Is the net init-script changing my rules? I think i have removed shorewall completely, so there shouldn't be any remaining files which could cause that behavior. Or are there some remaining files from shorewall? When i invoke iptables save with my generate rules and restart iptables, the rules are ok and i can connect! Thanks in advance! Daniel -- gentoo-user@gentoo.org mailing list