Webmaster forum - Firewall Log entry

Author

Firewall Log entry

William Tasso

2005-01-29, 11:20 pm

Greetings

I'm hoping that one of the great and good folk of AWW can analyse this
log entry or possibly hint at other causes of comms failure.

Jan 29 23:56:50 klogd: PF ***new-rule***: IN=eth1 OUT=eth0
SRC=82.68.xxx.xxx DST=10.1.1.xxx LEN=48 TOS=0x00 PREC=0x00 TTL=126
ID=48976 DF PROTO=TCP SPT=1283 DPT=80 WINDOW=65535 RES=0x00 SYN URGP=0

it's a firewall log entry created when computer 82.68.xxx.xxx calls a
web server on 10.1.1.xxx (using the ip)

IE gives the ubiquitous: Cannot find server or DNS Error
FF returns: The document contains no data

The same rule allows ping and tracert but the call on TCP port 80 (and
other ports) fails - any clues appreciated.

--
William Tasso

Toby Inkster

2005-01-30, 12:24 pm

William Tasso wrote:

> I'm hoping that one of the great and good folk of AWW can analyse this
> log entry or possibly hint at other causes of comms failure.

At a guess, the server can't send packets out -- possibly the "Gateway"
setting on the server needs changing.

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact

William Tasso

2005-01-30, 12:24 pm

Toby Inkster wrote:
> William Tasso wrote:
>
>
> At a guess, the server can't send packets out -- possibly the "Gateway"
> setting on the server needs changing.

Thanks, that's not it though. Got it working fine with port forwarding
NAT - would rather use static routes (which do work - verified by ping,
tracert etc.) and packet filtering (which doesn't - yet). Even when I
open the filter to 'all ports' there still isn't a usable connection to
the web server, or any other service.

I'm sure this would be a doddle if only I could decipher the mysteries
of ...
o ipchains - firewall rules
o firewall system log

oh well - always onwards ...

--
William Tasso