wizital
11-13-2002, 05:49 PM
Howdy,
I have iptables as a firewall on my box. Now I cannt run the whois.php script any more. Does anybody know which port(s)/service(s) I need to open up for such query?
Thanks in advance.
chrisblack
11-13-2002, 07:02 PM
43 I think. But, I could be wrong, I'm no firewall whizz ...
wizital
11-13-2002, 07:55 PM
Not it.
Thanks anyway, chrisblack!
bitserve
11-13-2002, 08:22 PM
Whois services do usually run on TCP port 43, by default.
Post a dump of your iptables and someone may be able to point out the problem, if it is truly a firewall issue.
wizital
11-13-2002, 09:34 PM
This this the script:
http://www.geocities.com/steve93138/firewall.txt
Thanks.
sasha
11-13-2002, 11:21 PM
It seems that you could just copy
# OUTPUT - PORT 80 - HTTP
part and replace 80 with 43.
If I am reading this correctly that should let you connect to the remote port 43 and send your query. You get your responses on $UNPRIVPORTS.
wizital
11-14-2002, 01:34 AM
That's it sasha. Thanks a lot.
May I ask what do I need to do to allow one (or two) IP
pingable from the outside base on that rule set?
sasha
11-14-2002, 02:09 AM
# who CAN BE pinged
PINGABLE="ping.my.ip.addy y.y.y.y"
# who can ping
PINGERS="i.can.ping.you j.j.j.j"
#or to allow it to the world
#PINGERS="0/0"
for pingable in $PINGABLE; do
for pingers in $PINGERS; do
iptables -A INPUT -j ACCEPT -s $pingers -d $pingable -i eth0 -m state --state NEW -p icmp --icmp-type ping
done
done
Keep in mind that I may not have any clue what I am talking about. This is important thing for server admin, and you migh want to check on it.
wizital
11-15-2002, 12:03 AM
Thanks sasha. I'll try your code out.
I really appreciate your help.
-W