[Shorewall-users] cannot reach the apache server

Anthony Kong
Mon, 23 Jun 2003 03:15:26 -0000

Hi, all,

I have posted it once, but I guess I did not recive
any reply yet, so I posted once again.

My problem is people cannot reach my server. I have
opened the ssh port and ftp ports. They are Ok in term
of connectivity. However when it comes to apache i do
not know if it is a firewall issue or apache issue. At
least in apache log I did not see any error message.
Event the https can get through.

attached is a partial output of the iptables. Any
suggestion are welcomed!

regards,



Anthony




__________________________________
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!
http://sbc.yahoo.com
-------------- next part --------------
Chain net2fw (1 references)
 pkts bytes target     prot opt in     out     source               destination
1814K 1938M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0
state RELATED,ESTABLISHED
  868 71930 newnotsyn  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW tcp flags:!0x16/0x02
    0     0 ACCEPT     esp  --  *      *       203.98.141.83        0.0.0.0/0
    0     0 ACCEPT     ah   --  *      *       203.98.141.83        0.0.0.0/0
   18  2952 ACCEPT     udp  --  *      *       203.98.141.83        0.0.0.0/0
udp spt:500 dpt:500 state NEW
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW tcp dpt:20
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW udp dpt:20
   12   636 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW tcp dpt:21
    0     0 ACCEPT     udp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW udp dpt:21
   30  1736 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW tcp dpt:22
   56  2672 DROP       icmp --  *      *       0.0.0.0/0            0.0.0.0/0
icmp type 8
   32  1612 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW tcp dpt:443
    0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0
state NEW tcp dpt:80
10442  693K net2all    all  --  *      *       0.0.0.0/0            0.0.0.0/0