Re: Which ports for http?

Paul Wollner
Mon, 26 Jan 2004 19:46:20 -0000

Sounds like your browser cannot do a DNS lookup. Are you allowing DNS
requests out?

----- Original Message -----
From: <the_activ@activ.dhs.org>
To: "Mailing List for Experienced Shorewall Users"
<shorewall-users@lists.shorewall.net>
Sent: Monday, January 26, 2004 9:40 PM
Subject: Re: [Shorewall-users] Which ports for http?


The problem is I''m not able to access webpages although I have port 80
set
to open.
So my situation is (simplified)
Policy: All port ingoing and outgoing are closed.
Rule allow outgoing port 80 and 443.

Now if I open a browser and go to google (or any other page) and can''t
access it. I asume this is due to http using ports other than 80 to send
data back.
I hope I''ve clarified this a bit.



> the_activ@activ.dhs.org wrote ..
>> I''m trying to make my shorewall only allow access to http.
>> So I made a default reject policy and rules to allow port 80 and 443
>> outgoing. Now I know http uses other ports but I have no clue which
>> ports
>> I also need to open.
>> Sorry for my ignorance but please help me, I tried lot''s and
got
>> nowhere.
>> _______________________________________________
>> Shorewall-users mailing list
>> Post: Shorewall-users@lists.shorewall.net
>> Subscribe/Unsubscribe:
>> https://lists.shorewall.net/mailman/listinfo/shorewall-users
>> Support: http://www.shorewall.net/support.htm
>> FAQ: http://www.shorewall.net/FAQ.htm
> Hello, assuming you are using Apache no other ports are needed. What are
> the Apache directives: Listen and Port set to? Remember the default
> Shorewall policy is to have all ports closed and then only open those
> needed. This problem should be straight forward. You really have not
> stated your problem or what is or is not working for you. Here are my
> rules for my public nic:
>
> ACCEPT:debug net fw tcp 80 -
> ACCEPT:debug fw net tcp 80 -
>
> Rules for port 443 would be similar.
> HTH, David.
> _______________________________________________
> Shorewall-users mailing list
> Post: Shorewall-users@lists.shorewall.net
> Subscribe/Unsubscribe:
> https://lists.shorewall.net/mailman/listinfo/shorewall-users
> Support: http://www.shorewall.net/support.htm
> FAQ: http://www.shorewall.net/FAQ.htm
>
>

_______________________________________________
Shorewall-users mailing list
Post: Shorewall-users@lists.shorewall.net
Subscribe/Unsubscribe:
https://lists.shorewall.net/mailman/listinfo/shorewall-users
Support: http://www.shorewall.net/support.htm
FAQ: http://www.shorewall.net/FAQ.htm