Very Computer

by **wrseg..** » Sun, 16 Sep 2001 14:45:46

I am running Redhat 7.1. When I set input to reject using the basic firewall
configuration panel under KDE, I can not browse the web. This seems to be
a case of having to disable my security to access the net. Am I missing
something here, or is this thing really that useless?

Thanks for any suggestions

Wade Segade

by **D. Stimit** » Sun, 16 Sep 2001 15:12:38

> I am running Redhat 7.1. When I set input to reject using the basic firewall
> configuration panel under KDE, I can not browse the web. This seems to be
> a case of having to disable my security to access the net. Am I missing
> something here, or is this thing really that useless?

> Thanks for any suggestions

> Wade Segade

If you want to browse, you have to allow output chain with destinations
of port 80. Where it comes back varies. I reject almost everything from
the outside, but web browse fine, because I allow output chain with
destination port 80 through.

by **r0gu** » Sun, 16 Sep 2001 15:15:53

> I am running Redhat 7.1. When I set input to reject using the basic
> firewall configuration panel under KDE, I can not browse the web. This
> seems to be a case of having to disable my security to access the net.
> Am I missing something here, or is this thing really that useless?

> Thanks for any suggestions

> Wade Segade

it sounds like you're rejecting all inbound packets, effectively shutting
you off the net. Take a look at your firewall script
/etc/rc.d/rc.firewall, and check the ipchains.org site for firewall tips
- they can give you more info than I can in a quick post

--
I will serve no algorithm before it's time.

by **Kasper Dupon** » Mon, 24 Sep 2001 19:11:08

> I am running Redhat 7.1. When I set input to reject using the basic firewall
> configuration panel under KDE, I can not browse the web. This seems to be
> a case of having to disable my security to access the net. Am I missing
> something here, or is this thing really that useless?

> Thanks for any suggestions

> Wade Segade

RedHat 7.1 by default uses ipchains. You need to
allow inputs that are responses to packets you
send. With ipchains this is most often done by
accepting all incomming tcp packets except from
the syn packets. And by allowing all udp packets
from port 53 on your DNS servers.

If you switch to iptables you can setup rules
that will keep track of the communication and
know which incoming packets are responses to
your own outgoing packets.

--
Kasper Dupont

Very Computer

Why does enabling firewall disallow web browsing?

Why does enabling firewall disallow web browsing?

Why does enabling firewall disallow web browsing?

Why does enabling firewall disallow web browsing?

Why does enabling firewall disallow web browsing?