Firewall question

[Derek Broughton]

Lucio M Nicolosi wrote:

> On Mon, Mar 9, 2009 at 2:06 PM, R Kimber <richardkimber at btinternet.com>
> wrote:

>> The firewall is blocking it.  There's no error. If there was a 404,
>> there surely wouldn't be any block. The message from Firestarter is
>>
>> Date port source protocol service
>>
>> Mar 9 16:45:49 52959 174.132.128.187 TCP unknown
>>
>> In the browser, nothing happens for a while and then it (or maybe one
>> of the plugins) reports a network timeout. I can ping the server OK.
>>
> Am I missing something or 174.132.128.187 is not www.pollingreport.com ?

It is:
$ nslookup www.pollingreport.com
...
Non-authoritative answer:
www.pollingreport.com   canonical name = pollingreport.com.
Name:   pollingreport.com
Address: 174.132.128.187

> I presume, of course, that you can access the site if Firestarter is
> disabled.

Of course, firestarter is just running iptables rules, and most firewalls
that I have seen are no good at recognizing rules that may have been
written _outside_ the tool - yet because they're just iptables rules, they
still catch all the errors if somebody else created the rule.

# sudo iptables -L

Should tell you what blocked it.  Finding out where the rule comes from
could be harder...
-- 
derek