ping

Chris Aitken chris-n/jUll39koHNgV/OU4+dkA at public.gmane.org
Thu Oct 18 02:08:33 UTC 2007


Daniel Son wrote:
> Good you've figured it out. from iptables output i see that IPP is 
> opened for the rest of the world. unless it is blocked by another, 
> internet facing firewall, anybody can print on your printers, or you 
> are using ipsec for the comupter4 to access computer1 (I see it is 
> opened on compter1 as well).
It's probably not a good thing I reply to the whole group. I don't 
understand what you're asking. I have no idea about security things. I 
wish there was a pain-free way to learn slowly about linux security and 
implement things as I understand them.

: /

Chris
>
> D
>
>
> -- 
> www.meta-for.org - Open Source software catalog
>
>
>
> Chris Aitken wrote:
>> Daniel Son wrote:
>>> Chris,
>>>
>>> Are you able to ping computer1 from computer2 or computer3?
>>> do you ping computer1 by IP address or by name, and if by name does 
>>> the name resolve properly?
>>> what does iptables -L say?
>> I'm okay now. My eth0:1 (LAN) was just Deactivated. I guess all other 
>> pinging worked because eth0 was still Activated.
>>
>> BTW, here's the output of iptables -L
>> Anything in there I should be concerned about (having never used that 
>> command)?
>>
>> [root at p733 chris]# /sbin/iptables -L
>> Chain INPUT (policy ACCEPT)
>> target     prot opt source               destination        
>> RH-Firewall-1-INPUT  all  --  anywhere             anywhere          
>> Chain FORWARD (policy ACCEPT)
>> target     prot opt source               destination        
>> REJECT     all  --  anywhere             anywhere            
>> reject-with icmp-host-prohibited
>>
>> Chain OUTPUT (policy ACCEPT)
>> target     prot opt source               destination       Chain 
>> RH-Firewall-1-INPUT (1 references)
>> target     prot opt source               destination        
>> ACCEPT     all  --  anywhere             anywhere           
>> ACCEPT     icmp --  anywhere             anywhere            icmp any
>> ACCEPT     esp  --  anywhere             anywhere           
>> ACCEPT     ah   --  anywhere             anywhere           
>> ACCEPT     udp  --  anywhere             224.0.0.251         udp 
>> dpt:mdns
>> ACCEPT     udp  --  anywhere             anywhere            udp dpt:ipp
>> ACCEPT     tcp  --  anywhere             anywhere            tcp dpt:ipp
>> ACCEPT     all  --  anywhere             anywhere            state 
>> RELATED,ESTABLISHED
>> ACCEPT     tcp  --  anywhere             anywhere            state 
>> NEW tcp dpt:ssh
>> REJECT     all  --  anywhere             anywhere            
>> reject-with icmp-host-prohibited
>>
>> Chris
>>
>>>
>>> d
>>>
>>>
>>> -- 
>>> www.meta-for.org - Open Source software catalog
>>>
>>>
>>>
>>> Chris Aitken wrote:
>>>> I am trying to set up a fourth computer to print to a remote 
>>>> printer. I guess I know how to do this now, but I can't ping 
>>>> computer1 from computer4.
>>>>
>>>> The hosts.allow file (computer1) looks fine.
>>>>
>>>> # hosts.allow   This file describes the names of the hosts which are
>>>> #               allowed to use the local INET services, as decided
>>>> #               by the '/usr/sbin/tcpd' server.
>>>> all : allow : all
>>>>
>>>> The hosts.deny file has no entries.
>>>>
>>>> What can I try next?
>>>>
>>>> Computer4 is on the Internet (through router>cable modem) and can 
>>>> ping the other two computers and the router. It just can't ping 
>>>> computer1 (which has the printer connected to it).
>>>>
>>>> Chris
>>>>
>>>>
>>>>
>>>> -- 
>>>> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
>>>> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
>>>> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>>> -- 
>>> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
>>> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
>>> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>>>
>>>
>>
>> -- 
>> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
>> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
>> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
> -- 
> The Toronto Linux Users Group.      Meetings: http://gtalug.org/
> TLUG requests: Linux topics, No HTML, wrap text below 80 columns
> How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists
>
>

--
The Toronto Linux Users Group.      Meetings: http://gtalug.org/
TLUG requests: Linux topics, No HTML, wrap text below 80 columns
How to UNSUBSCRIBE: http://gtalug.org/wiki/Mailing_lists





More information about the Legacy mailing list