On Tue, 2010-05-25 at 05:17 -0400, Bob Goodwin wrote:

> I have two f12 computers, box9 will ping box6 but box6 to box9
>     reports 100% loss. When we had Firestarter there was a log that
>     usually indicated where the firewall was blocking data.
> 
>     It seems to me there should be a way to determine this without
>     Firestarter? How do I do that?
> 
>     [b...@box6 ~]$ service sshd status
>     openssh-daemon (pid  1522) is running...
> 
>     Pinging the numerical addresses does not help.
> 
>     Thanks.
> 
>     Bob
> 
>     -- 
> 
>        
> 

If this applies for ssh only, you could do something like this, on box9:


IPTABLES -I INPUT -i eth0 -s ip.of.box.6 -p tcp -m tcp --dport 22 -j
ACCEPT


If you need more services to be available for box9, you simply let out
-m tcp and --dport 22, to get this:


IPTABLES -I INPUT -i eth0 -s ip.of.box.6 -j ACCEPT


To see all the packages from box6, you can insert the rule below:


IPTABLES -I INPUT -i eth0 -s ip.of.box.6 -m state --state NEW -j LOG
--log-prefix "IPTABLES - NEW PACKETS FROM BOX6: " --log-level 6


and watch the result in /var/log/messages (with tail
-f /var/log/messages)





Calin

Key fingerprint = 37B8 0DA5 9B2A 8554 FB2B 4145 5DC1 15DD A3EF E857

=================================================
Simon: "Some of these words -- they're misspelled. She started
correcting my spelling when she was three." --Episode #5, "Safe"
-- 
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

Reply via email to