View previous topic :: View next topic |
Author |
Message |
cr4ck3r5 n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 12 Apr 2007 Posts: 6
|
Posted: Sat Apr 14, 2007 9:56 pm Post subject: Blocked ports |
|
|
i got a dedicated server from some company with gentoo on board... They are providing standard services with their servers like ssh www named etc
Ports are of course open for them and everything works fine.
Now... im tryin to open few extra ports by iptables....
first thing: backup their settings... just in case
done
now lets see whats inside:
Code: | # Generated by iptables-save v1.3.4 on Sat Apr 14 22:55:50 2007
*nat
:PREROUTING ACCEPT [2456:409474]
:POSTROUTING ACCEPT [40478:3607791]
:OUTPUT ACCEPT [40478:3607791]
COMMIT
# Completed on Sat Apr 14 22:55:50 2007
# Generated by iptables-save v1.3.4 on Sat Apr 14 22:55:50 2007
*mangle
:PREROUTING ACCEPT [15574:7672903]
:INPUT ACCEPT [15397:7647061]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [74510:7525215]
:POSTROUTING ACCEPT [74510:7525215]
COMMIT
# Completed on Sat Apr 14 22:55:50 2007
# Generated by iptables-save v1.3.4 on Sat Apr 14 22:55:50 2007
*filter
:INPUT ACCEPT [15397:7647061]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [74510:7525215]
COMMIT
# Completed on Sat Apr 14 22:55:50 2007 |
Hmm... No rules?
Of course i cannot open any extra ports by iptables coz they remain always closed.
Now my question is: What else can be blocking other ports and how can i disable it? (or alternatively open extra ports by THAT)
Kindest regards |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
desultory Bodhisattva
![Bodhisattva Bodhisattva](/images/ranks/rank-bodhisattva.gif)
![](images/avatars/15563850365c4d454383627.gif)
Joined: 04 Nov 2005 Posts: 9410
|
Posted: Sun Apr 15, 2007 6:35 am Post subject: |
|
|
It is entirely possible that the hosting company or their network service provider (or both) blocks traffic to or from any given set of ports. If that is the case, as it appears to be, configuring iptables rules on the hosted system will not allow those ports to be accessed externally.
If your intention is to allow yourself access to additional services provided by the hosted system using ssh tunnels could be a viable alternative. If you intend to allow others to access services provided by the hosted system I suggest you contact the hosting services company and request that the ports be opened, or if it is acceptable under the terms of service provided by the hosting company, use alternative ports. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
cr4ck3r5 n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
Joined: 12 Apr 2007 Posts: 6
|
Posted: Sun Apr 15, 2007 1:27 pm Post subject: |
|
|
desultory, i think this is not a problem
But i did write to them... we'l see what they have to say
Anyway, they providing server reinstallation via their manager. Its fully automated... and takes about 10-15 mins to complete
Now, they have 2 pre-configed gentoos and one that is not. First one is for web hosting (ports 21 22 80 110 etc)
sec is for streaming (ports 21 22 80) and third is a standard installation with ssh access only.
I have a third one now which has only one port open (22) and i cannot use services on ports 21 80 110 coz they are blocked by default in this installation. No iptables were installed.
I know that other ppl using f.e. debian on their servers doesnt have such problem. They are simply adding rules to iptables so the hosting company doesnt block any traffic on any port |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|