RE: [cobalt-users] IPCHAINS & Rules Settings

[cobalt@xxxxxxxxxxxxx]

> >===== Original Message From cobalt-users@xxxxxxxxxxxxxxx =====
> > I tested everything from Pop3, SSH, FTP and HTTP were all
> > working fine.  I did
> > then a port scan which usually shows me all ports with
> > connection refused
> > message (from PortSentry), This time my scan were blocked and
> > all ports showed
> > timed-out connections.  The server were working fine and I
> > was accessing pop3
> > with no problem BUT then after 15 minutes all services became
> > un-reashable.  I
> > mean checking email times-out just like if the server is
> > offline. Same goes
> > for ssh.  Ping respond ok.  Websites browsing/loading slow!
> > then I re-booted
> > the server to flush the IPCHAINS Rules and now everything
> > back to norms.
> >
> > But I need to apply the IPCHAINS rules, and want to know what
> > is wrong.
> 
> PortSentry is probably dropping you with ipchains when you portscan your
> box (which is normal). You can set PortSentry to ignore your IP by
> adding your IP to the portsentry.ignore file. You could also use
> ipchains to accept all connections from your your IP with a rule like:-

How about adding logging to the rules, then trying it again.  You 
will then be able to get a clearer picture on what is going on.


Ian
--