Date: Fri, 13 Apr 2012 22:15:35 +0200
From: Natanael Copa <ncopa@alpinelinux.org>
To: Leonardo <rnalrd@gmail.com>
Cc: Alpine-devel <alpine-devel@lists.alpinelinux.org>
Subject: Re: [alpine-devel] edge 120403: bug in netfilter?
Message-ID: <20120413221535.16060469@alpinelinux.org>
In-Reply-To: <1334300016.25030.15.camel@df1844j>
References: <1334300016.25030.15.camel@df1844j>
Precedence: list
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

On Fri, 13 Apr 2012 08:53:36 +0200
Leonardo <rnalrd@gmail.com> wrote:

> Hi,
> 
> I have an edge box with latest edge snapshot with shorewall installed.
> Once logged remotely via ssh I've setup and started Shorewall with the
> following rule:
> 
> ACCEPT		all		fw		tcp
> 22
> 
> After that, I'm no longer able to establish new ssh connections from
> any IP address.
> 
> Thinking of a Shorewall issue (hoping to see AWall soon! Thanks
> kunkku!) I did "shorewall clear", and I was able to login via ssh
> again. 
> 
> So, instead of Shorewall, I've setup plain iptables rules:
> 
> iptables -I INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
> iptables -I INPUT -d $MYIP -p tcp --dport 22 -j ACCEPT
> 
> I didn't change the default INPUT policy (ACCEPT). After that, again,
> I wasn't able to login via ssh anymore.
> 
> Anybody noticed the same issue, or am I missing something obvious?

Did you add the interface to any zone?

-nc



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---