<html><head/><body><html><head></head><body>Hello John, <br>
<br>
That is a permit all policy, so the problem is most likely elsewhere. Please have a look at the interfaces file. For testing purposes, rename or remove that rules file and see if your problem goes away, but double-check your interfaces file too. It is entirely possible that Webmin did some changes there. <br>
<br>
In defence of Webmin, it is a great tool. Having said that, please take time to get to know it properly, because it gives you a lot of power without restrictions. Therefore it is indeed possible to bork your system comprehensively with absolute ease and style... :-) <br>
<br><br><div class="gmail_quote">John Winters <john@sinodun.org.uk> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre style="white-space: pre-wrap; word-wrap:break-word; font-family: sans-serif; margin-top: 0px">Wanting a quick firewall setup on a Thecus N2100 (headless ARM box, <br />running Debian Wheezy), I made the mistake of installing webmin. I <br />created an initial firewall configuration with everything set to ACCEPT, <br />but didn't activate it. I then stopped for the day, and the next time I <br />booted, neither NIC would respond to any kind of incoming traffic.<br /><br />I'm now trying to recover the box, but I'm struggling to work out where <br />exactly webmin has done the damage. (I can remove the HDD and mount it <br />in another machine, but I have no serial console for the Thecus, nor do <br />I have the parts here to make one.) I'm getting bored moving the HDD <br />backwards and forwards.<br /><br />I've found a file which webmin seems to have created:<br /><br />/etc/iptables.up.rules<br /><br /># Generated by iptables-save v1.4.14 on Mon Dec 24 21:08:49 201
2<br
/>*nat<br />:INPUT ACCEPT [0:0]<br />:PREROUTING ACCEPT [0:0]<br />:OUTPUT ACCEPT [0:0]<br />:POSTROUTING ACCEPT [0:0]<br />-A POSTROUTING -o eth0 -j MASQUERADE<br />COMMIT<br /># Completed on Mon Dec 24 21:08:49 2012<br /># Generated by iptables-save v1.4.14 on Mon Dec 24 21:08:49 2012<br />*mangle<br />:PREROUTING ACCEPT [356:23831]<br />:INPUT ACCEPT [354:23725]<br />:FORWARD ACCEPT [0:0]<br />:OUTPUT ACCEPT [328:136147]<br />:POSTROUTING ACCEPT [328:136147]<br />COMMIT<br /># Completed on Mon Dec 24 21:08:49 2012<br /># Generated by iptables-save v1.4.14 on Mon Dec 24 21:08:49 2012<br />*filter<br />:INPUT ACCEPT [1429:98896]<br />:FORWARD ACCEPT [0:0]<br />:OUTPUT ACCEPT [1412:498738]<br />COMMIT<br /># Completed on Mon Dec 24 21:08:49 2012<br /><br />but I've yet to find either a) the invocation of iptables-save which <br />created this, or b) the invocation of iptables-restore which later loads <br />it. Nor does it seem to me to contain anything which would do the
damage.<br /><br />I've tried putting:<br /><br />iptables -F<br />iptables -P INPUT ACCEPT<br />iptables -P FORWARD ACCEPT<br />iptables -P OUTPUT ACCEPT<br /><br />at the end of /etc/rc.local but without making any difference.<br /><br />The box boots fine, but I can't uninstall webmin until I can find a way <br />to communicate with it once it's booted.<br /><br />Any suggestions?<br /><br />John<br /><br />P.S. Apologies if I'm being very stupid. I've been laid up for the <br />last week and my brain isn't really going again yet.<br /><br /><br /><hr /><br />GLLUG mailing list<br />GLLUG@mailman.lug.org.uk<br /><a href="https://mailman.lug.org.uk/mailman/listinfo/gllug">https://mailman.lug.org.uk/mailman/listinfo/gllug</a><br /></pre></blockquote></div><br>
-- <br>
Regards, <br>
Jan Henkins </body></html></body></html>