regle firewall Fermé

Question

Bonjour,

mon probleme viens que je n'arrive pas a utiliser myfreetv quand mon firewall est actif.

j'ai deja posté la-dessus, avant que je reinstalle, et depuis cela fonctionné, donc c'etait bien, mais en me promenant dans le syteme, j'ai remarqué que mon firewall etait desactivé, j'espere que ce n'est pas grave d'avoir ete sans firewall pendant + 15 jours.

en conclusion je me retrouve encore avec ce probleme sur les bras!

j'ai retrouvé les regles cités :


iptables -A INPUT -i ra0 -s 212.27.38.253 -d 192.168.10.5 -j ACCEPT
iptables -A INPUT -i ra0 -s 212.27.38.253 -p tcp --dport 8080 -d 192.168.10.5 -j ACCEPT
iptables -A INPUT -i ra0 -s 212.27.38.253 -p udp -d 192.168.10.5 -j ACCEPT 
iptables -A INPUT -i ra0 -s 212.27.38.253 -j ACCEPT
iptables -A OUTPUT -o ra0 -d 212.27.38.253 -j ACCEPT


j'ai tapé les regle une par une en prenant soins de la desinstallé apres essai avec myfreetv (-D)

donc ces regles ne me permette tjrs pas de profiter de myfreetv avec mon firewall actif!

Avez vous d'autres idees?

Merci .

lami20j · Answer

Salut,

désactive ton firewall et lance myfreetv
ensuite affiche le résultat de la commandenetstat -lapute -n

fofo77 · Answer

udp        0      0 0.0.0.0:32768               0.0.0.0:*
        71         9924       -
udp        0      0 0.0.0.0:33200               0.0.0.0:*                                                                                   500        174404     16790/vlc
udp        0      0 0.0.0.0:33201               0.0.0.0:*                                                                                   500        174405     16790/vlc
udp        0      0 0.0.0.0:68                  0.0.0.0:*                                                                                   0          9033       -


j'ai relevé les infos pour vlc uniquement, si tu veux tout, dis le moi car y en a un paquet avec java

lami20j · Answer

Mais ça 212.27.38.253 tu l'as sortie d'où?

il faut que tu désactives ton firewall et ensuite lancer ton logiciel
pour voir où il se connecte

fofo77 · Answer

pour ta question, je n'ai fais que recopier sur un vieux post : # Salut, affiche le résultat de la commande /sbin/ifconfig -- lami20j Continuer la discussionRépondre à lami20j # Alerter un modérateur Autres messages de fofo77 Envoyer un message privé à fofo77 Revenir au Forum Linux/Unix Indice de pertinence de la réponse < 2 > fofo77 (jeudi 22 février 2007 à 21:15:29) eth0 Link encap:Ethernet HWaddr 00:0C:6E:E7:6C:D4 UP BROADCAST MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 lg file transmission:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interruption:17 lo Link encap:Boucle locale inet adr:127.0.0.1 Masque:255.0.0.0 adr inet6: ::1/128 Scope:Hôte UP LOOPBACK RUNNING MTU:16436 Metric:1 RX packets:1554 errors:0 dropped:0 overruns:0 frame:0 TX packets:1554 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 lg file transmission:0 RX bytes:87787 (85.7 KiB) TX bytes:87787 (85.7 KiB) ra0 Link encap:Ethernet HWaddr 00:11:D8:1E:C0:23 inet adr:192.168.10.5 Bcast:192.168.10.255 Masque:255.255.255.0 adr inet6: fe80::211:d8ff:fe1e:c023/64 Scope:Lien UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:10489258 errors:0 dropped:0 overruns:0 frame:0 TX packets:12101453 errors:36112 dropped:36112 overruns:0 carrier:0 collisions:374704 lg file transmission:1000 RX bytes:3919829765 (3.6 GiB) TX bytes:1701963732 (1.5 GiB) Interruption:20 Adresse de base:0x4000 Continuer la discussionRépondre à fofo77 # < 3 > lami20j (vendredi 23 février 2007 à 09:26:27) Salut, essaie comme ça (c'est juste pour tester) en root tape iptables -A INPUT -i ra0 -s 212.27.38.253 -d 192.168.10.5 - j ACCEPT ensuite essaie ton vlc -- lami20j euh, par contre les donnees indiqué dans mon post precedent etait bien avec le par-feu desactivé et myfreetv allumé je recommence : (Tous les processus ne peuvent être identifiés, les infos sur les processus non possédés ne seront pas affichées, vous devez être root pour les voir toutes.) Connexions Internet actives (serveurs et établies) Proto Recv-Q Send-Q Local Address Foreign Address State Utilisatr Inode PID/Program name tcp 0 0 0.0.0.0:8080 0.0.0.0:* LISTEN 2 10582 - tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN 0 10088 - tcp 0 0 0.0.0.0:631 0.0.0.0:* LISTEN 0 10263 - tcp 0 0 192.168.10.5:36047 207.46.111.23:1863 ESTABLISHED 500 99762 4130/kopete tcp 0 0 192.168.10.5:39932 212.27.38.253:554 ESTABLISHED 500 183267 19985/vlc tcp 0 0 192.168.10.5:42108 72.14.217.93:80 ESTABLISHED 500 181873 12579/mozilla-firef tcp 0 0 ::ffff:127.0.0.1:6880 :::* LISTEN 500 20831 4798/java tcp 0 0 ::ffff:127.0.0.1:45100 :::* LISTEN 500 20865 4798/java tcp 0 0 :::8080 :::* LISTEN 2 10581 - tcp 0 0 :::6000 :::* LISTEN 0 10087 - tcp 0 0 :::6897 :::* LISTEN 500 20844 4798/java tcp 0 0 :::631 :::* LISTEN 0 10262 - tcp 0 35 ::ffff:192.168.10.5:34715 ::ffff:88.162.52.251:20815 ESTABLISHED 500 153496 4798/java tcp 0 51770 ::ffff:192.168.10.5:37052 ::ffff:65.95.156.138:52347 ESTABLISHED 500 171842 4798/java tcp 0 0 ::ffff:192.168.10.5:36752 ::ffff:82.236.211.238:10751 ESTABLISHED 500 183308 4798/java tcp 0 63702 ::ffff:192.168.10.5:53790 ::ffff:82.120.156.242:56932 ESTABLISHED 500 166894 4798/java tcp 0 1 ::ffff:192.168.10.5:44236 ::ffff:80.148.22.96:6881 FIN_WAIT1 0 0 - tcp 0 0 ::ffff:192.168.10.5:53480 ::ffff:82.237.247.61:12633 ESTABLISHED 500 181703 4798/java tcp 0 1407 ::ffff:192.168.10.5:43803 ::ffff:67.169.207.196:13219 ESTABLISHED 500 183101 4798/java tcp 0 0 ::ffff:192.168.10.5:47701 ::ffff:88.144.47.82:6881 ESTABLISHED 500 181505 4798/java tcp 0 10009 ::ffff:192.168.10.5:49942 ::ffff:217.164.221.234:6881 ESTABLISHED 500 181660 4798/java tcp 0 11616 ::ffff:192.168.10.5:48760 ::ffff:83.11.70.45:51311 ESTABLISHED 500 170960 4798/java tcp 0 1 ::ffff:192.168.10.5:55029 ::ffff:201.199.177.24:52196 SYN_SENT 500 183343 4798/java tcp 0 0 ::ffff:192.168.10.5:39282 ::ffff:84.202.30.242:49152 ESTABLISHED 500 30088 4798/java tcp 0 0 ::ffff:192.168.10.5:44164 ::ffff:82.243.19.135:17526 ESTABLISHED 500 181520 4798/java tcp 0 0 ::ffff:192.168.10.5:34609 ::ffff:89.86.64.224:6346 ESTABLISHED 500 171291 4798/java tcp 0 0 ::ffff:192.168.10.5:40891 ::ffff:144.137.236.23:58000 ESTABLISHED 500 161138 4798/java tcp 0 0 ::ffff:192.168.10.5:54497 ::ffff:85.180.94.238:18768 ESTABLISHED 500 115858 4798/java tcp 0 0 ::ffff:192.168.10.5:38875 ::ffff:83.194.189.12:51556 ESTABLISHED 500 177655 4798/java tcp 0 44750 ::ffff:192.168.10.5:48597 ::ffff:82.66.56.100:33059 ESTABLISHED 500 170849 4798/java tcp 0 17 ::ffff:192.168.10.5:34622 ::ffff:203.59.205.30:6881 ESTABLISHED 500 181229 4798/java tcp 0 0 ::ffff:192.168.10.5:38896 ::ffff:172.185.187.38:39716 ESTABLISHED 500 178007 4798/java tcp 0 13032 ::ffff:192.168.10.5:44171 ::ffff:201.246.221.14:22915 ESTABLISHED 500 183242 4798/java tcp 0 42984 ::ffff:192.168.10.5:53835 ::ffff:77.216.148.174:11682 ESTABLISHED 500 181773 4798/java tcp 0 13032 ::ffff:192.168.10.5:34166 ::ffff:84.20.229.220:58934 ESTABLISHED 500 181849 4798/java tcp 0 43200 ::ffff:192.168.10.5:38352 ::ffff:84.103.169.190:57720 ESTABLISHED 500 182108 4798/java tcp 0 0 ::ffff:192.168.10.5:35953 ::ffff:82.65.45.122:55555 ESTABLISHED 500 177647 4798/java tcp 0 91 ::ffff:192.168.10.5:45914 ::ffff:24.232.218.249:6881 ESTABLISHED 500 181575 4798/java tcp 0 5 ::ffff:192.168.10.5:46536 ::ffff:86.8.241.79:6881 ESTABLISHED 500 152727 4798/java tcp 0 0 ::ffff:192.168.10.5:40291 ::ffff:89.170.17.12:6346 ESTABLISHED 500 174828 4798/java tcp 0 133 ::ffff:192.168.10.5:60707 ::ffff:213.44.64.142:6881 ESTABLISHED 500 183119 4798/java tcp 0 0 ::ffff:192.168.10.5:36510 ::ffff:193.248.83.151:24670 ESTABLISHED 500 177968 4798/java tcp 0 46016 ::ffff:192.168.10.5:48481 ::ffff:172.204.131.25:45575 ESTABLISHED 500 170888 4798/java tcp 0 0 ::ffff:192.168.10.5:58202 ::ffff:90.24.215.222:55832 ESTABLISHED 500 181381 4798/java tcp 0 0 ::ffff:192.168.10.5:52934 ::ffff:83.115.85.76:4178 ESTABLISHED 500 181835 4798/java tcp 0 0 ::ffff:192.168.10.5:50997 ::ffff:87.91.242.125:6881 ESTABLISHED 500 181732 4798/java tcp 0 0 ::ffff:192.168.10.5:58021 ::ffff:64.93.91.135:10642 ESTABLISHED 500 181795 4798/java tcp 0 12199 ::ffff:192.168.10.5:55720 ::ffff:216.95.94.201:51694 ESTABLISHED 500 169153 4798/java tcp 0 0 ::ffff:192.168.10.5:46219 ::ffff:85.192.222.159:6346 ESTABLISHED 500 145862 4798/java tcp 0 1 ::ffff:192.168.10.5:39804 ::ffff:75.54.243.59:56730 SYN_SENT 500 183387 4798/java tcp 0 0 ::ffff:192.168.10.5:46038 ::ffff:81.249.184.232:6881 ESTABLISHED 500 183107 4798/java tcp 0 0 ::ffff:192.168.10.5:49341 ::ffff:88.165.111.140:15741 ESTABLISHED 500 183347 4798/java tcp 0 12700 ::ffff:192.168.10.5:57705 ::ffff:84.20.229.220:58934 LAST_ACK 0 0 - tcp 0 0 ::ffff:192.168.10.5:34386 ::ffff:212.195.163.32:64319 ESTABLISHED 500 181947 4798/java tcp 0 0 ::ffff:192.168.10.5:33964 ::ffff:24.183.177.191:65530 ESTABLISHED 500 158752 4798/java tcp 0 1 ::ffff:192.168.10.5:38029 ::ffff:86.69.7.152:33160 SYN_SENT 500 183361 4798/java tcp 0 0 ::ffff:192.168.10.5:54254 ::ffff:172.204.223.17:58272 ESTABLISHED 500 183292 4798/java tcp 0 0 ::ffff:192.168.10.5:48171 ::ffff:86.193.184.163:41133 ESTABLISHED 500 183295 4798/java tcp 0 1 ::ffff:192.168.10.5:34734 ::ffff:48.146.59.47:29641 SYN_SENT 500 183349 4798/java tcp 0 49660 ::ffff:192.168.10.5:54348 ::ffff:88.138.3.47:25530 ESTABLISHED 500 164810 4798/java tcp 0 0 ::ffff:192.168.10.5:46954 ::ffff:84.58.7.200:38037 ESTABLISHED 500 177561 4798/java tcp 0 0 ::ffff:192.168.10.5:41594 ::ffff:67.68.204.30:6881 ESTABLISHED 500 183322 4798/java tcp 0 0 ::ffff:192.168.10.5:51397 ::ffff:64.93.91.136:10642 ESTABLISHED 500 171981 4798/java tcp 0 0 ::ffff:192.168.10.5:40391 ::ffff:84.102.139.69:43493 ESTABLISHED 500 181593 4798/java tcp 0 0 ::ffff:192.168.10.5:60613 ::ffff:83.199.75.79:16885 ESTABLISHED 500 181742 4798/java tcp 0 67006 ::ffff:192.168.10.5:50548 ::ffff:70.52.115.174:16650 ESTABLISHED 500 181142 4798/java tcp 0 0 ::ffff:192.168.10.5:51649 ::ffff:64.93.91.134:10860 ESTABLISHED 500 181679 4798/java tcp 0 0 ::ffff:192.168.10.5:33284 ::ffff:86.72.189.246:20655 ESTABLISHED 500 181959 4798/java tcp 0 0 ::ffff:192.168.10.5:48215 ::ffff:86.205.134.202:10000 ESTABLISHED 500 171496 4798/java tcp 0 1 ::ffff:192.168.10.5:53437 ::ffff:125.63.130.164:6881 SYN_SENT 500 183348 4798/java tcp 0 0 ::ffff:192.168.10.5:38334 ::ffff:84.177.103.141:62203 ESTABLISHED 500 130646 4798/java tcp 0 0 ::ffff:192.168.10.5:52042 ::ffff:84.97.210.145:28637 ESTABLISHED 500 175675 4798/java tcp 0 1 ::ffff:192.168.10.5:42086 ::ffff:116.123.173.10:36906 SYN_SENT 500 183531 - tcp 0 0 ::ffff:192.168.10.5:43123 ::ffff:88.104.78.67:17660 ESTABLISHED 500 177677 4798/java tcp 0 68 ::ffff:192.168.10.5:48778 ::ffff:213.93.33.219:24617 ESTABLISHED 500 183131 4798/java tcp 0 35380 ::ffff:192.168.10.5:38977 ::ffff:70.110.244.229:57047 ESTABLISHED 500 181492 4798/java tcp 0 1 ::ffff:192.168.10.5:43687 ::ffff:86.7.242.136:28648 SYN_SENT 500 183371 4798/java tcp 0 13032 ::ffff:192.168.10.5:41604 ::ffff:82.128.186.171:32525 ESTABLISHED 500 181207 4798/java tcp 0 0 ::ffff:192.168.10.5:53438 ::ffff:64.93.91.135:10860 ESTABLISHED 500 181595 4798/java tcp 0 43440 ::ffff:192.168.10.5:39832 ::ffff:81.220.119.241:26364 ESTABLISHED 500 181621 4798/java tcp 0 0 ::ffff:192.168.10.5:45173 ::ffff:84.102.244.76:47957 ESTABLISHED 500 180935 4798/java tcp 0 0 ::ffff:192.168.10.5:54529 ::ffff:85.228.121.69:65078 ESTABLISHED 500 174824 4798/java tcp 0 20272 ::ffff:192.168.10.5:57862 ::ffff:89.152.132.144:41300 ESTABLISHED 500 183121 4798/java tcp 0 0 ::ffff:192.168.10.5:42659 ::ffff:82.246.173.45:15829 ESTABLISHED 500 170169 4798/java tcp 0 0 ::ffff:192.168.10.5:43752 ::ffff:212.194.20.248:54148 ESTABLISHED 500 181748 4798/java tcp 0 0 ::ffff:192.168.10.5:53504 ::ffff:86.193.151.137:56579 ESTABLISHED 500 167059 4798/java tcp 0 0 ::ffff:192.168.10.5:54959 ::ffff:80.236.233.130:3421 ESTABLISHED 500 181836 4798/java tcp 0 0 ::ffff:192.168.10.5:38653 ::ffff:75.14.61.217:32624 ESTABLISHED 500 148932 4798/java tcp 0 0 ::ffff:192.168.10.5:54262 ::ffff:81.62.10.16:44029 ESTABLISHED 500 181587 4798/java tcp 0 0 ::ffff:192.168.10.5:45649 ::ffff:90.24.31.178:43021 ESTABLISHED 500 169813 4798/java tcp 0 0 ::ffff:192.168.10.5:45471 ::ffff:85.75.91.219:55666 ESTABLISHED 500 183232 4798/java tcp 0 0 ::ffff:192.168.10.5:54406 ::ffff:85.70.69.18:2002 ESTABLISHED 500 181680 4798/java tcp 0 0 ::ffff:192.168.10.5:33353 ::ffff:86.217.194.11:8327 ESTABLISHED 500 183338 4798/java tcp 0 0 ::ffff:192.168.10.5:34235 ::ffff:64.93.91.136:10782 ESTABLISHED 500 172002 4798/java tcp 0 0 ::ffff:192.168.10.5:53187 ::ffff:81.111.101.48:6881 ESTABLISHED 500 181467 4798/java tcp 0 0 ::ffff:192.168.10.5:56411 ::ffff:62.34.95.5:12730 ESTABLISHED 500 181632 4798/java tcp 0 11584 ::ffff:192.168.10.5:38531 ::ffff:202.73.127.173:49168 ESTABLISHED 500 174870 4798/java tcp 0 845 ::ffff:192.168.10.5:37659 ::ffff:83.152.178.85:22006 ESTABLISHED 500 181468 4798/java tcp 0 0 ::ffff:192.168.10.5:36959 ::ffff:86.135.91.69:59153 ESTABLISHED 500 183309 4798/java tcp 0 30398 ::ffff:192.168.10.5:55933 ::ffff:82.239.67.248:6881 ESTABLISHED 500 178206 4798/java tcp 0 0 ::ffff:192.168.10.5:55570 ::ffff:90.32.83.222:21529 ESTABLISHED 500 168684 4798/java tcp 0 0 ::ffff:192.168.10.5:54103 ::ffff:60.226.158.101:29090 ESTABLISHED 500 128462 4798/java tcp 0 30240 ::ffff:192.168.10.5:35546 ::ffff:201.255.65.42:49000 ESTABLISHED 500 181685 4798/java tcp 0 0 ::ffff:192.168.10.5:42481 ::ffff:82.232.175.225:17270 ESTABLISHED 500 165629 4798/java tcp 0 0 ::ffff:192.168.10.5:54706 ::ffff:89.98.76.65:6346 ESTABLISHED 500 183105 4798/java tcp 0 21502 ::ffff:192.168.10.5:53116 ::ffff:87.81.108.173:40996 ESTABLISHED 500 181382 4798/java tcp 0 0 ::ffff:192.168.10.5:39665 ::ffff:82.230.121.88:40999 ESTABLISHED 500 177524 4798/java tcp 0 0 ::ffff:192.168.10.5:50175 ::ffff:67.34.224.16:45160 ESTABLISHED 500 137806 4798/java tcp 0 30408 ::ffff:192.168.10.5:53267 ::ffff:72.196.223.162:10001 ESTABLISHED 500 177960 4798/java tcp 0 0 ::ffff:192.168.10.5:42489 ::ffff:202.156.234.71:12242 ESTABLISHED 500 181236 4798/java tcp 0 12960 ::ffff:192.168.10.5:43281 ::ffff:213.44.210.143:23961 ESTABLISHED 500 183120 4798/java tcp 0 17271 ::ffff:192.168.10.5:39136 ::ffff:81.49.149.236:23441 ESTABLISHED 500 171876 4798/java tcp 0 0 ::ffff:192.168.10.5:58554 ::ffff:86.13.210.58:46657 ESTABLISHED 500 181515 4798/java tcp 0 1 ::ffff:192.168.10.5:34125 ::ffff:151.17.95.190:51001 SYN_SENT 500 183325 4798/java tcp 0 0 ::ffff:192.168.10.5:60240 ::ffff:82.248.98.240:6346 ESTABLISHED 500 159661 4798/java tcp 0 0 ::ffff:192.168.10.5:55270 ::ffff:64.93.91.135:10782 ESTABLISHED 500 183102 4798/java tcp 0 64800 ::ffff:192.168.10.5:60096 ::ffff:86.66.229.8:23313 ESTABLISHED 500 183234 4798/java tcp 0 33304 ::ffff:192.168.10.5:40124 ::ffff:82.224.213.164:60254 ESTABLISHED 500 181118 4798/java tcp 0 0 ::ffff:192.168.10.5:58172 ::ffff:83.200.22.235:6789 ESTABLISHED 500 181747 4798/java tcp 0 0 ::ffff:192.168.10.5:60577 ::ffff:86.67.143.4:60533 ESTABLISHED 500 181915 4798/java tcp 0 0 ::ffff:192.168.10.5:47311 ::ffff:90.5.225.50:48434 ESTABLISHED 500 181796 4798/java tcp 0 68 ::ffff:192.168.10.5:41405 ::ffff:74.101.225.183:20942 ESTABLISHED 500 181958 4798/java tcp 0 0 ::ffff:192.168.10.5:34450 ::ffff:82.230.141.111:7902 ESTABLISHED 500 151588 4798/java tcp 0 0 ::ffff:192.168.10.5:51819 ::ffff:64.93.91.137:10782 ESTABLISHED 500 172040 4798/java tcp 0 7241 ::ffff:192.168.10.5:55936 ::ffff:86.14.10.152:8735 LAST_ACK 0 0 - udp 0 0 0.0.0.0:32768 0.0.0.0:* 71 9924 - udp 0 0 0.0.0.0:68 0.0.0.0:* 0 180474 - udp 0 0 0.0.0.0:33240 0.0.0.0:* 500 183271 19985/vlc udp 0 0 0.0.0.0:33241 0.0.0.0:* 500 183272 19985/vlc udp 0 0 0.0.0.0:5353 0.0.0.0:* 71 9923 - udp 0 0 0.0.0.0:631 0.0.0.0:* 0 10266 - udp 0 0 :::32769 :::* 71 10013 - udp 0 0 ::ffff:192.168.10.5:32774 :::* 500 20874 4798/java udp 0 0 :::16680 :::* 500 20873 4798/java udp 0 0 ::ffff:192.168.10.5:8008 :::* 500 20880 4798/java udp 0 0 :::1900 :::* 500 20879 4798/java udp 0 0 :::6897 :::* 500 20846 4798/java [joffrey@localhost ~]$

lami20j · Answer

ok,

mais pas besoin de faire copier/coller d'un autre post, mettre le lien c'est suffisant :-))

essaie comme ça
iptables -A INPUT -i ra0 -s 212.27.38.253 -d 192.168.10.5 -j ACCEPT
iptables -A OUTPUT -o ra0 -j ACCEPT

fofo77 · Answer

me revoila :)

bon, j'ai essayer :

iptables -A INPUT -i ra0 -s 212.27.38.253 -d 192.168.10.5 -j ACCEPT
iptables -A OUTPUT -o ra0 -j ACCEPT

malheuresement tjrs sans succes..

j'ai tapé une regle apres l'autres, et je l'ai desinstalé en meme temps apres verif.

d'autre  sugestion :(

merci

Regle firewall

6 réponses

Discussions similaires