Hello Antony, I responded you yesterday about the order of you of a list (iptables -L. . . . ) of rules that I have in my firewall, but the reply was outside of the thread. You'll find it among yesterday's messages "Stealth on emule..." From "Ricardo A" or "Ricardo C"... Thanks for your help Cordially Richard ----- Original Message ----- From: "Antony Stone" <Antony@xxxxxxxxxxxxxxxxxxxx> To: <netfilter@xxxxxxxxxxxxxxxxxxx> Sent: Monday, June 07, 2004 11:51 AM Subject: Re: Stealth on emule.... > On Monday 07 June 2004 3:34 pm, Ricardo C wrote: > > > I have a LAN with Windows XP clients and cablemodem exit to Internet thru a > > router Debian Woody with iptables. I need that one of the clients > > (192.168.111.2) can to download and upload files with eMule. I applied in > > the router the iptables rules given by Oskar Andreason in their tutorial > > and I opened the ports (tcp and udp) 4661, 4662, 4665, 4672, 4711. > > BUT the eMule continues giving Low ID to client. With an external > > ports-scan on the router I find that these ports continue presenting to > > eMule as stealth, in spite of the fact that I opened them. I need to know > > if what I made to open these ports is well. Please you could revise the > > rules that I paste below and tell me if they are OK??? Because if they are > > OK my ISP is filtering the ports corresponding to the eMule. > > I see no rule in your ruleset allowing those packets through the FORWARD chain > on your machine, therefore it won't pass them on to the client? > > Maybe I'm missing something because of the layout of the rules - if you think > the appropriate FORWARDing rules are there, please post the output of > "iptables -L -nvx; iptables -L -t nat -nvx; iptables -L -t mangle -nvx" > because I find this an easier format to understand for such a long ruleset. > > Hope this helps, > > Antony. > > -- > If builders made buildings the way programmers write programs, then the first > woodpecker to come along would destroy civilisation. > > Please reply to the list; > please don't CC me. > > >
