Hi, I have squid HTTP proxy running on both of the following servers (server 1 and 2). But the proxy service on server1 can not be accessed from outside. I am not familiar with the output of iptables. Could the difference explain why proxy on server1 is not accessible? Thanks. server1:~$ sudo iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination REJECT tcp -- anywhere anywhere tcp dpt:smtp reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:http reject-with icmp-port-unreachable ACCEPT tcp -- localhost anywhere tcp dpt:5900 ACCEPT tcp -- localhost anywhere tcp dpt:5901 ACCEPT tcp -- localhost anywhere tcp dpt:5902 ACCEPT tcp -- localhost anywhere tcp dpt:5903 ACCEPT tcp -- localhost anywhere tcp dpt:5904 ACCEPT tcp -- localhost anywhere tcp dpt:5905 ACCEPT tcp -- localhost anywhere tcp dpt:5906 ACCEPT tcp -- localhost anywhere tcp dpt:5907 REJECT tcp -- anywhere anywhere tcp dpt:5900 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5901 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5902 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5903 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5904 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5905 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5906 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5907 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:imap2 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:imaps reject-with icmp-port-unreachable Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination server2:~$ sudo iptables -L Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT tcp -- localhost anywhere tcp dpt:5900 ACCEPT tcp -- localhost anywhere tcp dpt:5901 ACCEPT tcp -- localhost anywhere tcp dpt:5902 ACCEPT tcp -- localhost anywhere tcp dpt:5903 ACCEPT tcp -- localhost anywhere tcp dpt:5904 ACCEPT tcp -- localhost anywhere tcp dpt:5905 ACCEPT tcp -- localhost anywhere tcp dpt:5906 ACCEPT tcp -- localhost anywhere tcp dpt:5907 REJECT tcp -- anywhere anywhere tcp dpt:5900 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5901 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5902 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5903 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5904 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5905 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5906 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:5907 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:smtp reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:http reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:imap2 reject-with icmp-port-unreachable REJECT tcp -- anywhere anywhere tcp dpt:imaps reject-with icmp-port-unreachable Chain FORWARD (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination -- Regards, Peng -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
