FC3: no route to host with enabled firewall

Alexander Dalloz ad+lists at uni-x.org
Wed Dec 8 13:54:06 UTC 2004


Am Mi, den 08.12.2004 schrieb Miroslav Holubec um 14:38:

> i've problem with my firewall. i think that, it filter my outgoing
> packets. if i enable firewall in system-config-securitylevel, then a lot
> of my outgoing connections are filtered.

Hm, I think by default only INPUT and FORWARD are filtered, OUTPUT not.
You can check that by running

iptables -L -n -v

> for example:
> 
> [user at comp ~]$ ftp 1.2.3.4
> Connected to 1.2.3.4.

That is a remote host IP and you are running the ftp connect on FC3?

> I have to use passive mode, becouse i'm behind another hw firewall. In
> FC2 i haven't problem with that. i was trying to search some
> informations on google, but i wasn't lucky.

> M.Holubec

Try "modprobe ip_conntrack_ftp", if that helps. If yes, then you should
add that module to /etc/sysconfig/iptables-config.

Alexander


-- 
Alexander Dalloz | Enger, Germany | new address - new key: 0xB366A773
legal statement: http://www.uni-x.org/legal.html
Fedora GNU/Linux Core 2 (Tettnang) on Athlon kernel 2.6.9-1.6_FC2smp 
Serendipity 14:48:52 up 2 days, 14:11, load average: 2.31, 0.78, 0.51 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041208/7ea45670/attachment-0001.sig>


More information about the fedora-list mailing list