to filter some ports is becoming a new "fashion" by the ISP. The reason is "why he will serve a webserver if i can do this and charge some fresh money for it" just that ----- Original Message ----- From: "Patrick Leslie Polzer" <leslie.polzer@xxxxxxx> To: <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Saturday, May 29, 2004 1:03 PM Subject: Re: DNAT problem > On Sat, 29 May 2004 12:36:37 -0300 > "Alexis" <alexis@xxxxxxxxxxx> wrote: > > > i think it could be > > > > - that the isp (if you're connecting to one isp trough ppp0) has a filter for > > port 80 (it seems strange) > Hm, possible. I just noticed 81 works, too! What crap is this? > > > are you mangling some packets? what is the output for iptables -t mangle -L? > No rules at all, I generally try to stay away from mangling when testing: > > > ### <snip> ### > > stronghold:~# iptables -t mangle -L > Chain PREROUTING (policy ACCEPT) > target prot opt source destination > > Chain INPUT (policy ACCEPT) > target prot opt source destination > > Chain FORWARD (policy ACCEPT) > target prot opt source destination > > Chain OUTPUT (policy ACCEPT) > target prot opt source destination > > Chain POSTROUTING (policy ACCEPT) > target prot opt source destination > > ### </snip> ### > > > So I guess all facts are pointing at my crappy ISP... > > Leslie > >