Koozali.org: home of the SME Server

IPTables problem

hamishau

IPTables problem
« on: July 26, 2004, 02:14:29 PM »
Hi all,

I have an interesting problem. I am attempting to RDP (MS Remote Desktop Protocol, TCP, port 3389) outbound from my SME 6.01-01 server set as server-gateway, to my work Terminal Server. Using an ADSL connection on a second NIC in the server. The ADSL bit works perfectly.

I am consistenly getting "deny" logged in the messages log file. When RDP'ing to other a different Terminal Server it is fine, and connects OK.

Jul 26 22:05:56 server kernel: denylog:IN= OUT=eth0 SRC=192.168.0.5 DST=192.168.0.50 LEN=76 TOS=0x00 PREC=0xC0 TTL=64 ID=15362 PROTO=ICMP TYPE=5 CODE=1 GATEWAY=a.b.c.d [SRC=192.168.0.50 DST=a.b.c.d LEN=48 TOS=0x00 PREC=0x00 TTL=128 ID=1058 DF PROTO=TCP SPT=1581 DPT=3389 WINDOW=16384 RES=0x00 SYN URGP=0 ]

(I have replaced the IP address I am trying to get to with a.b.c.d for security reasons.)

I am a little confused as to why the first DST entry is the local IP address of the laptop I am using, and why this is being picked up as ICMP traffic, and not TCP traffic (which I believe it is).

I am assuming that there is something in the IPTables/Masq configuration or somethign which I have not yet figured out, but I am reasonaby new to this and have not been able to find it. I have grep'ed the entire filesystem for the IP address, but have not come up with anything yet. I have Googled also, and been thoroughly confused, and am now posting this here.

I would appreciate any assistance in this.

Thanks in advance,
Hamish, Melboure, Australia

hamishau

Solved!
« Reply #1 on: July 26, 2004, 04:09:26 PM »
Hi all,

Managed to figure this one out! It was a static route stuck in the /etc/sysconfic/static-routes file
Commented it out, and my RDP worked like a dream again!

Hamish, Melbourne, Australia