Re: Which ports for http?

the_activ@activ.dhs.org
Tue, 27 Jan 2004 15:58:26 -0000

It was right in front of my nose... you''re absolutelly right.

> Sounds like your browser cannot do a DNS lookup. Are you allowing DNS
> requests out?
>
> ----- Original Message -----
> From: <the_activ@activ.dhs.org>
> To: "Mailing List for Experienced Shorewall Users"
> <shorewall-users@lists.shorewall.net>
> Sent: Monday, January 26, 2004 9:40 PM
> Subject: Re: [Shorewall-users] Which ports for http?
>
>
> The problem is I''m not able to access webpages although I have
port 80 set
> to open.
> So my situation is (simplified)
> Policy: All port ingoing and outgoing are closed.
> Rule allow outgoing port 80 and 443.
>
> Now if I open a browser and go to google (or any other page) and
can''t
> access it. I asume this is due to http using ports other than 80 to send
> data back.
> I hope I''ve clarified this a bit.
>
>
>
>> the_activ@activ.dhs.org wrote ..
>>> I''m trying to make my shorewall only allow access to http.
>>> So I made a default reject policy and rules to allow port 80 and
443
>>> outgoing. Now I know http uses other ports but I have no clue which
>>> ports
>>> I also need to open.
>>> Sorry for my ignorance but please help me, I tried lot''s
and got
>>> nowhere.
>>> _______________________________________________
>>> Shorewall-users mailing list
>>> Post: Shorewall-users@lists.shorewall.net
>>> Subscribe/Unsubscribe:
>>> https://lists.shorewall.net/mailman/listinfo/shorewall-users
>>> Support: http://www.shorewall.net/support.htm
>>> FAQ: http://www.shorewall.net/FAQ.htm
>> Hello, assuming you are using Apache no other ports are needed. What
are
>> the Apache directives: Listen and Port set to? Remember the default
>> Shorewall policy is to have all ports closed and then only open those
>> needed. This problem should be straight forward. You really have not
>> stated your problem or what is or is not working for you. Here are my
>> rules for my public nic:
>>
>> ACCEPT:debug net fw tcp 80 -
>> ACCEPT:debug fw net tcp 80 -
>>
>> Rules for port 443 would be similar.
>> HTH, David.
>> _______________________________________________
>> Shorewall-users mailing list
>> Post: Shorewall-users@lists.shorewall.net
>> Subscribe/Unsubscribe:
>> https://lists.shorewall.net/mailman/listinfo/shorewall-users
>> Support: http://www.shorewall.net/support.htm
>> FAQ: http://www.shorewall.net/FAQ.htm
>>
>>
>
> _______________________________________________
> Shorewall-users mailing list
> Post: Shorewall-users@lists.shorewall.net
> Subscribe/Unsubscribe:
> https://lists.shorewall.net/mailman/listinfo/shorewall-users
> Support: http://www.shorewall.net/support.htm
> FAQ: http://www.shorewall.net/FAQ.htm
>
>
>
>
> _______________________________________________
> Shorewall-users mailing list
> Post: Shorewall-users@lists.shorewall.net
> Subscribe/Unsubscribe:
> https://lists.shorewall.net/mailman/listinfo/shorewall-users
> Support: http://www.shorewall.net/support.htm
> FAQ: http://www.shorewall.net/FAQ.htm
>
>