Linode Forum
Linode Community Forums
 FAQFAQ    SearchSearch    MembersMembers      Register Register 
 LoginLogin [ Anonymous ] 
Post new topic  Reply to topic
Author Message
PostPosted: Wed Sep 19, 2012 6:27 pm 
Offline
Newbie

Joined: Wed Sep 19, 2012 6:22 pm
Posts: 4
We are having an issue when we try to ssh or sftp to our linode server. We flushed the IPTABLES and were able to connect in with no problem. Once I restored the iptables we are no longer able to connect. Following is the iptable we have in place. Can someone please tell me if they see any issues?

ACCEPT udp -- anywhere anywhere udp dpt:20 state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp dpt:fsp state NEW,ESTABLISHED
ACCEPT udp -- anywhere anywhere udp dpt:domain state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:https state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:www state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:ssmtp state NEW,ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp dpt:smtp state NEW,ESTABLISHED
DROP icmp -- anywhere anywhere limit: avg 15/sec burst 5
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

Chain FORWARD (policy DROP)
target prot opt source destination
REJECT all -- anywhere anywhere reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp spt:20 state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:fsp state ESTABLISHED
ACCEPT udp -- anywhere anywhere udp spt:domain state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ssh state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:https state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:www state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:ssmtp state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp spt:smtp state ESTABLISHED
ACCEPT tcp -- anywhere anywhere tcp multiport sports tcpmux:63665 state
NEW,ESTABLISHED
ACCEPT icmp -- anywhere anywhere icmp any

Chain fail2ban-ssh (1 references)
target prot opt source destination
RETURN all -- anywhere anywhere
root@www:~#

All was working up till this morning and we have not made any changes.

Thanks


Top
   
PostPosted: Thu Sep 20, 2012 1:50 am 
Offline
Senior Member
User avatar

Joined: Sun Jan 18, 2009 2:41 pm
Posts: 830
You don't have a rule in the INPUT chain allowing traffic to port 22 (dpt:ssh). You'll need to add one using whatever mechanism you're using to generate firewall rules.

Edit: oops, this was already answered elsewhere.


Top
   
Display posts from previous:  Sort by  
Post new topic  Reply to topic


Who is online

Users browsing this forum: No registered users and 2 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
RSS

Powered by phpBB® Forum Software © phpBB Group