[gentoo-user] emerge --sync and iptables

[gentoo-user] emerge --sync and iptables

[Dan Sheffner]

[-- Attachment #1: Type: text/plain, Size: 683 bytes --]

I'm not sure what I have been doing wrong.  I have a local sync server
located at 10.1.10.37 and I'm running iptables on a web server.  What port
do I need to open when I run emerge --sync?  I have tried port 873 like
below and still no luck.  I do not have a firewall running on the sync
server.


below is an example of my firewall rules on the web server

ip=<publicIP>

iptables -F
iptables -P INPUT DROP
iptables -A INPUT -i eth0 -p tcp -d $ip --dport 443 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -s 10.1.10.0/24 -d $ip --dport 22 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp -s 10.1.10.37 -d $ip --dport 873 -j ACCEPT



Any help would greatly appreciated.

[-- Attachment #2: Type: text/html, Size: 1017 bytes --]

Re: [gentoo-user] emerge --sync and iptables

[Benno Schulenberg]

Dan Sheffner wrote:
> iptables -A INPUT -i eth0 -p tcp -d $ip --dport 443 -j ACCEPT
> iptables -A INPUT -i eth0 -p tcp -s 10.1.10.0/24 -d $ip 
> --dport 22 -j ACCEPT

These two are incoming, so --dport is correct.

> iptables -A INPUT -i eth0 -p tcp -s 10.1.10.37 -d  $ip 
> --dport 873 -j ACCEPT

Rsync is outgoing, toward port 873, so the answer is coming back 
from that port: --sport.

Benno
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] emerge --sync and iptables

[Dan Sheffner]

[-- Attachment #1: Type: text/plain, Size: 677 bytes --]

so port 873 is going out? my default policy for OUTPUT is accept with no
rules. wich port should I accept as the INPUT?

On 3/18/06, Benno Schulenberg <benno.schulenberg@gmail.com> wrote:
>
> Dan Sheffner wrote:
> > iptables -A INPUT -i eth0 -p tcp -d $ip --dport 443 -j ACCEPT
> > iptables -A INPUT -i eth0 -p tcp -s 10.1.10.0/24 -d $ip
> > --dport 22 -j ACCEPT
>
> These two are incoming, so --dport is correct.
>
> > iptables -A INPUT -i eth0 -p tcp -s 10.1.10.37 -d  $ip
> > --dport 873 -j ACCEPT
>
> Rsync is outgoing, toward port 873, so the answer is coming back
> from that port: --sport.
>
> Benno
> --
> gentoo-user@gentoo.org mailing list
>
>

[-- Attachment #2: Type: text/html, Size: 1086 bytes --]