Iptables problem - when enabled, can't access VPSes [message #20235] |
Thu, 13 September 2007 16:52  |
tomfra
Messages: 28 Registered: September 2007
|
Junior Member |
|
|
I know some people reported different problem related to iptables but none of the forum posts (and not just on this forum) helped me solve my particular problem...
The problem: When firewall is enabled, I can't ping or in any other way access the VPS, when it's disabled, it works just fine.
Here are the facts:
* Hardware node works OK, has iptables / CSF firewall installed.
* Kernel is 2.6.18 custom compiled, behaviour of the related problem is the same with standard OpenVZ kernel though.
* IP forwarding is enabled - cat /proc/sys/net/ipv4/ip_forward returns 1.
* OS: CentOS 5 x86_64, all standard packages updated via yum daily.
* VPS IP address is added to csf.allow list and is properly added as an allowed IP to iptables rules.
I have attached my iptables rules as set by CSF. There are currently 2 IPs on the csf.deny list (hackers) and 2 IPs on the csf.allow list. Those IPs are the MAIN_NODE_IP and TEST_VPS_IP. There are real IPs on the original list of course.
Any ideas what could be causing this problem are *very* welcome.
Thanks for your time!
Tomas
Do you really believe the Internet is a safe place?
IdentityCloaker.com - Take Back Your Privacy!
[Updated on: Thu, 13 September 2007 16:53] Report message to a moderator
|
|
|