[Shorewall-users] Local to Local

Tom Eastep
Fri, 04 Jul 2003 07:56:37 -0000

On Fri, 2003-07-04 at 07:55, John L. Goodale wrote:
> Hello all,
>
> Im trying to set up VNC here to get from one system to another.
>
> I have three boxes.
>
> windows 2000
>
> windows xp
>
> Linux with mandrake with shorewall running on it.
>
> I can VNC to the server in Linux from any system no problem there.
>
> I can VNC to the windows xp and 2000 box to each other.
>
> the problem is I cant VNCviewer to any of the windows boxes from the Linux
> box.
> says its refused.
>
> Jul  4 09:40:57 all2all:REJECT:IN= OUT=eth1 SRC=192.168.1.1
DST=192.168.1.60
> LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=15616 DF PROTO=TCP SPT=39265 DPT=5900
> WINDOW=5840 RES=0x00 SYN URGP=0
>
> why can I go from windows to windows and windows to Linux but not Linux to
> windows?

Because you have no ACCEPT rule for fw->masq that includes TCP port
5900.