[NTLUG:Discuss] Redhat 7.2, iptables & qpopper

[Bob Byron]

Well, you should do a "netstat -l" to verify you are listening.  I think
you are.  So, the easiest thing I would recommend you do is to
download a standard firewall off the web like monmotha's:
http://monmotha.mplug.org/firewall/index.php

I like to use the stable release, so 2.2.1 is the most recent
release for me.  It is designed to support an internal and external
network using iptables.

Oh, it does come configured with some ports open that seem
to be more tailored to that persons system then to the general
public, so you might review the TCP_ALLOW and
UDP_ALLOW values.

Bob

----- Original Message -----
From: "Stan Tigrett" <stigrett at killer-webs.com>
To: <discuss at ntlug.org>
Sent: Monday, February 04, 2002 1:07 PM
Subject: RE: [NTLUG:Discuss] Redhat 7.2, iptables & qpopper


> Thanks for the response..
>
> I can connect to port 110 of the external interface via telnet if I am on the internal network or
I'm working from the firewall itself.  I can't connect to that port via telnet from anywhere on the
outside internet.
>
> All my other 'wide open' ports work like I want them to (ssh, smtp, http).  They are available
from the outside.  The service scan @ hexillion.com confirmed this.  It's only the pop3 port that is
giving me trouble.
>
> ----Original Message-----
> From: discuss-admin at ntlug.org [mailto:discuss-admin at ntlug.org]On Behalf
> Of Bob Byron
> Sent: Monday, February 04, 2002 11:38 AM
> To: discuss at ntlug.org
> Subject: Re: [NTLUG:Discuss] Redhat 7.2, iptables & qpopper
>
>
> Well, since your scan shows the ports are open, the first thing
> I would do is to telnet into the port like this:
> telnet xxx.xxx.xxx.xxx 110
>
> If you see something like the following, then you are okay:
> +OK POP3 killer-webs.com v2000.70rh server ready
>
> Assuming that "killer-webs.com" would be your server.
>
> Also, you can use the online tools at hexillion.com to aid
> your trouble shooting.  Check out the online email dossier.
>
> Bob
>
>
>
> _______________________________________________
> http://www.ntlug.org/mailman/listinfo/discuss