View Single Post
  #3  
Old 26th July 2012, 15:12
jrfk2 jrfk2 is offline
Junior Member
 
Join Date: Jul 2012
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default

I have tried with the firewall down and have added a custom port for 9090 for tcp .. so wonder if its a linux permission thing .. there was nothing in the error_log and just nomal server stuff in the access_log.

I am *thinking* port 9090 is OK becuase I do get prompted for the admin/pw .. so I think its happening after that validation

What folder(s) might it be trying to access to show the admin stuff so I can check permissions?

here's the iptables stuff:

Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT udp -- anywhere anywhere udp dpts:msgsrvr:8792
ACCEPT tcp -- anywhere anywhere tcp dpts:msgsrvr:8792
ACCEPT tcp -- anywhere anywhere tcp dpt:microsoft-ds
ACCEPT tcp -- anywhere anywhere tcp dpt:netbios-ssn
ACCEPT udp -- anywhere anywhere udp dpt:netbios-dgm
ACCEPT udp -- anywhere anywhere udp dpt:netbios-ns
ACCEPT tcp -- anywhere anywhere tcp dpt:bootps
ACCEPT udp -- anywhere anywhere udp dpt:bootps
ACCEPT tcp -- anywhere anywhere tcp dpt:domain
ACCEPT udp -- anywhere anywhere udp dpt:domain
ACCEPT all -- anywhere anywhere
ACCEPT tcp -- anywhere anywhere state RELATED,ESTABLISHED
ACCEPT udp -- anywhere anywhere state RELATED,ESTABLISHED
REJECT tcp -- anywhere anywhere tcp dpt:auth reject-with icmp-port-unreachable
ACCEPT tcp -- anywhere anywhere tcp dpt:cfengine
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh
ACCEPT tcp -- anywhere anywhere tcp dpt:vnc-server
ACCEPT tcp -- anywhere anywhere tcp dpt:5901
ACCEPT tcp -- anywhere anywhere tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:5656
ACCEPT udp -- anywhere anywhere udp dpts:avt-profile-1:avt-profile-2
ACCEPT tcp -- anywhere anywhere tcp dpts:avt-profile-1:avt-profile-2
ACCEPT udp -- anywhere anywhere udp dpt:20830
ACCEPT tcp -- anywhere anywhere tcp dpt:20830
ACCEPT tcp -- anywhere anywhere tcp dpts:sip:na-localise
ACCEPT udp -- anywhere anywhere udp dpts:sip:na-localise
ACCEPT tcp -- anywhere anywhere tcp dpt:12080
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:domain
ACCEPT udp -- anywhere anywhere state NEW udp dpt:domain
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https
ACCEPT tcp -- anywhere anywhere tcp dpt:21100
ACCEPT tcp -- anywhere anywhere tcp dpt:dc
ACCEPT udp -- anywhere anywhere udp dpt:wizard
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http
ACCEPT ah -- anywhere anywhere
ACCEPT esp -- anywhere anywhere
ACCEPT udp -- anywhere anywhere state NEW udp dpt:isakmp
ACCEPT 254 -- anywhere anywhere
ACCEPT icmp -- anywhere anywhere icmp router-advertisement
ACCEPT icmp -- anywhere anywhere icmp destination-unreachable
ACCEPT icmp -- anywhere anywhere icmp time-exceeded
ACCEPT icmp -- anywhere anywhere icmp echo-reply
ACCEPT icmp -- anywhere anywhere icmp source-quench
ACCEPT icmp -- anywhere anywhere icmp echo-request
ACCEPT icmp -- anywhere anywhere icmp parameter-problem
DROP icmp -- anywhere anywhere icmp any
ACCEPT tcp -- anywhere anywhere tcp dpt:ipp
ACCEPT tcp -- anywhere anywhere tcp dpt:tproxy
ACCEPT tcp -- anywhere anywhere tcp dpt:virtual-places
ACCEPT udp -- anywhere anywhere state NEW udp dpt:52311
ACCEPT tcp -- anywhere anywhere tcp dpts:30000:30005
DROP tcp -- anywhere anywhere tcp dpts:bootps:bootpc
DROP udp -- anywhere anywhere udp dpts:bootps:bootpc
DROP tcp -- anywhere anywhere tcp dpt:netbios-ns
DROP udp -- anywhere anywhere udp dpt:netbios-ns
DROP tcp -- anywhere anywhere tcp dpt:netbios-dgm
DROP udp -- anywhere anywhere udp dpt:netbios-dgm
DROP tcp -- anywhere anywhere tcp dpt:netbios-ssn
DROP udp -- anywhere anywhere udp dpt:netbios-ssn
DROP tcp -- anywhere anywhere tcp dpts:tcpmux:ftp-data
DROP tcp -- anywhere anywhere tcp dpt:sunrpc
DROP tcp -- anywhere anywhere tcp dpts:snmp:snmptrap
DROP tcp -- anywhere anywhere tcp dpt:efs
DROP tcp -- anywhere anywhere tcp dpts:6348:6349
DROP tcp -- anywhere anywhere tcp dpts:6345:gnutella-rtr
ACCEPT tcp -- anywhere anywhere state NEW tcp dpts:apc-9950:9959
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:9960
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:webcache
ACCEPT tcp -- anywhere anywhere state NEW tcp dptcsync-https
ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:websm
LOG tcp -- anywhere anywhere limit: avg 3/min burst 5 LOG level info prefix `FIREWALL: '
LOG udp -- anywhere anywhere limit: avg 3/min burst 5 LOG level info prefix `FIREWALL: '
DROP all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere xxx.xxx.xxx.0/24 state RELATED,ESTABLISHED
ACCEPT all -- xxx.xxx.xxx.0/24 anywhere
ACCEPT all -- anywhere anywhere
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable
REJECT all -- anywhere anywhere reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target prot opt source destination
Reply With Quote