Chat programs sneaking by NOCAT. :(
"Todd A. May" <[email protected]> Tue, 17 Jan 2006 08:20:16 -0500
| Newsgroups | gmane.network.nocat |
|---|---|
| Message-ID | <005e01c61b68$c34ab640$8a02a9c0@devtmay01> |
All, Can someone look at my IPTABLES for NOCAT and let me know why yahoo chat and others are sneaking by the nocat redirects? [root@epwia root]# iptables --list Chain INPUT (policy ACCEPT) target prot opt source destination ACCEPT udp -- epwia_p2p_03 epwia udp dpt:syslog ACCEPT udp -- epwia_centerhill epwia udp dpt:syslog ACCEPT udp -- epwia_main epwia udp dpt:syslog ACCEPT udp -- 192.169.2.6 epwia udp dpt:syslog ACCEPT udp -- epwia_p2p_02 epwia udp dpt:syslog ACCEPT udp -- epwia_stbrnd_01 epwia udp dpt:syslog ACCEPT udp -- anywhere anywhere udp dpt:ntp ACCEPT tcp -- anywhere anywhere tcp dpt:http Chain FORWARD (policy ACCEPT) target prot opt source destination ACCEPT tcp -- anywhere anywhere tcp dpt:http NoCat all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain NoCat (1 references) target prot opt source destination NoCat_Ports all -- anywhere anywhere NoCat_Inbound all -- anywhere anywhere ACCEPT all -- 192.169.2.0/24 anywhere MARK match 0x1 ACCEPT all -- 192.169.2.0/24 anywhere MARK match 0x2 ACCEPT all -- 192.169.2.0/24 anywhere MARK match 0x3 ACCEPT tcp -- 192.169.2.0/24 epwia tcp dpt:http ACCEPT tcp -- epwia 192.169.2.0/24 tcp spt:http ACCEPT tcp -- 192.169.2.0/24 epwia tcp dpt:https ACCEPT tcp -- epwia 192.169.2.0/24 tcp spt:https ACCEPT tcp -- 192.169.2.0/24 hcso.org tcp dpt:http ACCEPT tcp -- hcso.org 192.169.2.0/24 tcp spt:http ACCEPT tcp -- 192.169.2.0/24 www.hcso.org tcp dpt:https ACCEPT tcp -- hcso.org 192.169.2.0/24 tcp spt:https ACCEPT tcp -- 192.169.2.0/24 www.courtclerk.org tcp dpt:http ACCEPT tcp -- ftp.courtclerk.org 192.169.2.0/24 tcp spt:http ACCEPT tcp -- 192.169.2.0/24 www.courtclerk.org tcp dpt:https ACCEPT tcp -- ftp.courtclerk.org 192.169.2.0/24 tcp spt:https ACCEPT all -- epwia 192.169.2.0/24 ACCEPT tcp -- 192.169.2.0/24 epwia tcp dpt:domain ACCEPT udp -- 192.169.2.0/24 epwia udp dpt:domain DROP tcp -- !epwia anywhere tcp dpt:5280 DROP all -- anywhere anywhere Chain NoCat_Inbound (1 references) target prot opt source destination ACCEPT all -- anywhere anywhere Chain NoCat_Ports (1 references) target prot opt source destination