Grokbase
Topics Posts Groups | in
x
[ help ]

Re: iptables starts blocking outbound http traffic

View PostFlat  Thread  Threaded | < Prev - Next >
Kai Schaetzl Re: [CentOS] iptables starts blocking outbound http traffic
| +1 vote
[ Profile | Reply to group ] [ Flat  Thread  Threaded ]
Neil Aggarwal wrote on Thu, 6 Nov 2008 08:33:59 -0600:

> /sbin/iptables -A OUTPUT -o eth0 -s $ETH0_IP -p tcp --sport http --dport
> 1024: -m state --state ESTABLISHED -j ACCEPT

Why do you try to filter outbound connections at all? If "something" makes
it on your machine the first thing they will do is drop your rules.

Kai

--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Services: http://www.conactive.com



_______________________________________________
CentOS mailing list
[email protected: C...@centos.org]
http://lists.centos.org/mailman/listinfo/centos

Thread : iptables starts blocking outbound http traffic
1)
Neil Aggarwal Hello: I have a machine running CentOS 5 x86_64. It is running apache httpd and tomcat. For some...
2)
Filipe Brandenburger Hi, If you're using ESTABLISHED, it depends on ip_conntrack being able to track the connections....
3)
Neil Aggarwal Filipe: Thanks for the information. If I do: cat /proc/sys/net/ipv4/netfilter/ip_conntrack_max on...
4)
Filipe Brandenburger Hi, Because this might potentially close several connections and free slots in the conntrack table....
5)
Neil Aggarwal Filipe: I changed the firewall rules on the server that had stopped responding to not use...
6)
Neil Aggarwal Filipe: One of my servers stopped responding again. This time, it was one of those which was not...
7)
Filipe Brandenburger Hi, No problem. Look into the number of busy httpd servers, that might be your problem use a...
8)
Kai Schaetzl Neil Aggarwal wrote on Thu, 6 Nov 2008 08:33:59 -0600: Why do you try to filter outbound...
9)
Joseph L. Casale You imply the *only* reason for outbound filtering is stop a hacker. In some environments it serves...
spacer
View PostFlat  Thread  Threaded | < Prev - Next >