Grokbase
Topics Posts Groups | in
x
[ help ]

RE: iptables starts blocking outbound http traffic

View PostFlat  Thread  Threaded | < Prev
Joseph L. Casale RE: [CentOS] iptables starts blocking outbound http traffic
| +1 vote
[ Profile | Reply to group ] [ Flat  Thread  Threaded ]
>Why do you try to filter outbound connections at all? If "something" makes
>it on your machine the first thing they will do is drop your rules.

You imply the *only* reason for outbound filtering is stop a hacker. In some
environments it serves as an additional layer of protection against other problems
related to configuration/application issues as an example.

jlc

_______________________________________________
CentOS mailing list
[email protected: C...@centos.org]
http://lists.centos.org/mailman/listinfo/centos

Thread : iptables starts blocking outbound http traffic
1)
Neil Aggarwal Hello: I have a machine running CentOS 5 x86_64. It is running apache httpd and tomcat. For some...
2)
Filipe Brandenburger Hi, If you're using ESTABLISHED, it depends on ip_conntrack being able to track the connections....
3)
Neil Aggarwal Filipe: Thanks for the information. If I do: cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max on...
4)
Filipe Brandenburger Hi, Because this might potentially close several connections and free slots in the conntrack table....
5)
Neil Aggarwal Filipe: I changed the firewall rules on the server that had stopped responding to not use...
6)
Neil Aggarwal Filipe: One of my servers stopped responding again. This time, it was one of those which was not...
7)
Filipe Brandenburger Hi, No problem. Look into the number of busy httpd servers, that might be your problem use a...
8)
Kai Schaetzl Neil Aggarwal wrote on Thu, 6 Nov 2008 08:33:59 -0600: Why do you try to filter outbound...
9)
Joseph L. Casale You imply the *only* reason for outbound filtering is stop a hacker. In some environments it serves...
spacer
View PostFlat  Thread  Threaded | < Prev