Forums

Smitti
Smitti
Offline
Resolved
0 votes
Hello,

2 nights ago the port forwaring on my server stopped.
For more than 2 months it worked for storj port 28967

My setup is: internet <=> modem (DMZ to Clearos) <=> Clearos <=> Lan (192.168.11.107 )
All the other ports like mail are still open.

I have searched the forum, tried several things I found but no luck :(

[root@local ~]# iptables -nvL -t nat
Chain PREROUTING (policy ACCEPT 4274 packets, 651K bytes)
pkts bytes target prot opt in out source destination
3 180 DNAT tcp -- * * 0.0.0.0/0 192.168.178.15 tcp dpt:28967 to:192.168.11.107:28967

Chain INPUT (policy ACCEPT 1147 packets, 103K bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 845 packets, 59635 bytes)
pkts bytes target prot opt in out source destination

Chain POSTROUTING (policy ACCEPT 303 packets, 22213 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- * tun+ 0.0.0.0/0 0.0.0.0/0
0 0 SNAT tcp -- * * 192.168.11.0/24 192.168.11.107 tcp dpt:28967 to:192.168.11.1
1503 171K MASQUERADE all -- * enp3s0 0.0.0.0/0 0.0.0.0/0

[root@local ~]# iptables -nvL
Chain INPUT (policy DROP 117 packets, 5161 bytes)
pkts bytes target prot opt in out source destination
4 208 DROP all -- * * 0.0.0.0/0 0.0.0.0/0 state INVALID
0 0 REJECT tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x12/0x12 state NEW reject-with tcp-reset
4 1596 DROP tcp -- * * 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW
0 0 DROP all -- enp3s0 * 127.0.0.0/8 0.0.0.0/0
2508 320K ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- pptp+ * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tun+ * 0.0.0.0/0 0.0.0.0/0
1940 277K ACCEPT all -- enp6s0 * 0.0.0.0/0 0.0.0.0/0
19 551 ACCEPT icmp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 icmptype 0
0 0 ACCEPT icmp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 icmptype 3
0 0 ACCEPT icmp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 icmptype 8
0 0 ACCEPT icmp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 icmptype 11
0 0 ACCEPT udp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 udp spt:67 dpt:68
0 0 ACCEPT tcp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 tcp spt:67 dpt:68
104 4160 ACCEPT tcp -- * * 0.0.0.0/0 192.168.178.15 tcp dpt:80
120 10290 ACCEPT tcp -- * * 0.0.0.0/0 192.168.178.15 tcp dpt:443
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.178.15 tcp dpt:143
0 0 ACCEPT tcp -- * * 0.0.0.0/0 192.168.178.15 tcp dpt:993
406 53312 ACCEPT udp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 udp dpts:1024:65535 state RELATED,ESTABLISHED
999 228K ACCEPT tcp -- enp3s0 * 0.0.0.0/0 0.0.0.0/0 tcp dpts:1024:65535 state RELATED,ESTABLISHED

Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
3 180 ACCEPT tcp -- * enp6s0 0.0.0.0/0 192.168.11.107 tcp dpt:28967
91303 33M ACCEPT all -- * * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 ACCEPT all -- pptp+ * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- tun+ * 0.0.0.0/0 0.0.0.0/0
1434 239K ACCEPT all -- enp6s0 * 0.0.0.0/0 0.0.0.0/0

Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
2509 320K ACCEPT all -- * lo 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- * pptp+ 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT all -- * tun+ 0.0.0.0/0 0.0.0.0/0
1224 625K ACCEPT all -- * enp6s0 0.0.0.0/0 0.0.0.0/0
20 692 ACCEPT icmp -- * enp3s0 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT udp -- * enp3s0 0.0.0.0/0 0.0.0.0/0 udp spt:68 dpt:67
0 0 ACCEPT tcp -- * enp3s0 0.0.0.0/0 0.0.0.0/0 tcp spt:68 dpt:67
600 26400 ACCEPT tcp -- * enp3s0 192.168.178.15 0.0.0.0/0 tcp spt:80
588 42744 ACCEPT tcp -- * enp3s0 192.168.178.15 0.0.0.0/0 tcp spt:443
0 0 ACCEPT tcp -- * enp3s0 192.168.178.15 0.0.0.0/0 tcp spt:143
0 0 ACCEPT tcp -- * enp3s0 192.168.178.15 0.0.0.0/0 tcp spt:993
1248 73894 ACCEPT all -- * enp3s0 0.0.0.0/0 0.0.0.0/0

Chain DROP-lan (0 references)
pkts bytes target prot opt in out source destination
0 0 DROP all -- * * 0.0.0.0/0 0.0.0.0/0


Can some one see a problem? I realy got stuck.

Peter
Friday, January 03 2020, 04:37 PM
Share this post:
Responses (1)
  • Accepted Answer

    Smitti
    Smitti
    Offline
    Friday, January 03 2020, 05:59 PM - #Permalink
    Resolved
    0 votes
    I really do not get it.... changed the IP of the lan machine and to static suddenly it works again.
    The reply is currently minimized Show
Your Reply