Selective web access and SuSe 11
"James Raftery" <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.ipfilter |
|---|---|
| Message-ID | <23219_1232384277_4974B114_23219_1430_1_10901191700.ZM20156@pec5.sc.ch.man.ac.uk> |
Hello Darren/Anyone
I have just installed SuSe 11.0 on a machine in a subnet. Static IP # and
DNS but avahi was taken down anyway as was the firewall. The subnet has
machines with Windows 2000/XP, Irix,SuSe 8.4/9.2/10.1 which access the web
world with no difficulty. However the 11.0 is selective:
OK:
The local (within the subnet)web server
Two external unrelated sites
Sites whose target is a PDF
Not OK:
The rest
Tcpdump shows that there is a handshake and then a timeout for these sites:
mysite.port# --> external.http S
external.http --> mysite.port# S
mysite.port# --> external.http . ack 1
mysite.port# --> external.http P 1:389
external.http --> mysite.port# . ack 389
The flow of the subnet is through a dual homed vintage machine running IRIX 6.2
AND IP_fil3.4.16. If I take ipfilter down then no problem.
Hope someone has been here before me and knows what's going on,
Jim
p.s. Should updating be a solution, as IRIX is a deadend, I was considering
netBSD on a PC.
--
James Raftery
School of Chemistry |E-Mail:[email protected]
Manchester University| FAX:+44 (0)161-275-4273
Manchester M13 9PL | Tel.#:+44 (0)161-275-4698
U.K.