Foro
Hola e_zitro,
Bueno puedes hacer una cosa.... guarda en un fichero el contenido de iptables -L -n -v
Y luego haz iptables -F (borra todas la reglas).
Si te funciona borrando todas las reglas... eso que hay alguna que filtra, cuelga el fichero por ahí y le hecho un ojo a ver si doy con el filtro en cuestión.
Un saludo ;-)
Hola madralphw
Yo ya había echado un vistazo a la iptables y no había visto nada raro, de todas formas te las envío para que las veas y me digas si tu ves algo.
# iptables -L -n -v
Chain INPUT (policy ACCEPT 23 packets, 6670 bytes)
pkts bytes target prot opt in out source destination
3387 455K VOIP_INPUT tcp -- * * 0.0.0.0/0 0.0.0.0/0
37090 13M VOIP_INPUT udp -- * * 0.0.0.0/0 0.0.0.0/0
40620 13M CWMP_CR all -- * * 0.0.0.0/0 0.0.0.0/0
40623 13M DOS_INPUT all -- * * 0.0.0.0/0 0.0.0.0/0
40621 13M DHCP_RELAY all -- * * 0.0.0.0/0 0.0.0.0/0
40621 13M ACL all -- * * 0.0.0.0/0 0.0.0.0/0
40621 13M FrwlInChk all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FORWARD (policy ACCEPT 58824 packets, 7517K bytes)
pkts bytes target prot opt in out source destination
0 0 TCPMSS tcp -- * eth0.3 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
2269 145K TCPMSS tcp -- * ppp100 0.0.0.0/0 0.0.0.0/0 tcp flags:0x06/0x02 TCPMSS clamp to PMTU
0 0 RETURN udp -- !br+ * 0.0.0.0/0 0.0.0.0/0 destination IP range 224.0.0.0-239.255.255.255
0 0 DROP udp -- !br+ !br+ 0.0.0.0/0 0.0.0.0/0 udp dpt:68
116K 42M DOS_FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0
58824 7517K Parental_Ctrl all -- br+ * 0.0.0.0/0 0.0.0.0/0
116K 42M UPNP_PRE all -- * * 0.0.0.0/0 0.0.0.0/0
116K 42M ADDRMAP_FORWARD all -- * * 0.0.0.0/0 0.0.0.0/0
116K 42M ipfilter_chain all -- * * 0.0.0.0/0 0.0.0.0/0
8933 1245K url_filter_chain tcp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 80
113K 42M app_filter_chain tcp -- * * 0.0.0.0/0 0.0.0.0/0
3002 270K app_filter_chain udp -- * * 0.0.0.0/0 0.0.0.0/0
116K 42M PORT_FORWARDING all -- * * 0.0.0.0/0 0.0.0.0/0
116K 42M DEFAULT_SERVER all -- * * 0.0.0.0/0 0.0.0.0/0
58824 7517K FrwlForwardInChk all -- br0 * 0.0.0.0/0 0.0.0.0/0
56859 35M FrwlForwardInChk all -- ppp100 * 0.0.0.0/0 0.0.0.0/0
Chain OUTPUT (policy ACCEPT 198K packets, 21M bytes)
pkts bytes target prot opt in out source destination
198K 21M FrwlOutChk all -- * * 0.0.0.0/0 0.0.0.0/0
Chain ACL (1 references)
pkts bytes target prot opt in out source destination
Chain ADDRMAP_FORWARD (1 references)
pkts bytes target prot opt in out source destination
Chain CWMP_CR (1 references)
pkts bytes target prot opt in out source destination
Chain DEFAULT_SERVER (1 references)
pkts bytes target prot opt in out source destination
Chain DHCP_RELAY (1 references)
pkts bytes target prot opt in out source destination
Chain DOS_FORWARD (1 references)
pkts bytes target prot opt in out source destination
Chain DOS_INPUT (1 references)
pkts bytes target prot opt in out source destination
Chain FrwlForwardInChk (2 references)
pkts bytes target prot opt in out source destination
56859 35M ACCEPT all -- ppp100 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
0 0 DROP tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:23
0 0 DROP udp -- br0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:23
0 0 DROP tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:161
0 0 DROP udp -- br0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:161
58824 7517K FrwlOutChk all -- br0 * 0.0.0.0/0 0.0.0.0/0
0 0 FrwlOutChk tcp -- ppp100 * 80.58.63.128/25 0.0.0.0/0 tcp dpt:7547
0 0 FrwlOutChk icmp -- ppp100 * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 FrwlOutChk tcp -- ppp100 * 80.58.63.128/25 0.0.0.0/0 tcp dpt:22
0 0 FrwlOutChk tcp -- ppp100 * 172.20.25.0/24 0.0.0.0/0 tcp dpt:22
0 0 FrwlOutChk tcp -- ppp100 * 172.20.45.0/24 0.0.0.0/0 tcp dpt:22
0 0 FrwlOutChk tcp -- ppp100 * 193.152.37.192/28 0.0.0.0/0 tcp dpt:22
0 0 FrwlOutChk tcp -- ppp100 * 80.58.63.128/25 0.0.0.0/0 tcp dpt:443
0 0 FrwlOutChk tcp -- ppp100 * 172.20.25.0/24 0.0.0.0/0 tcp dpt:443
0 0 FrwlOutChk tcp -- ppp100 * 172.20.45.0/24 0.0.0.0/0 tcp dpt:443
0 0 FrwlOutChk tcp -- ppp100 * 193.152.37.192/28 0.0.0.0/0 tcp dpt:443
0 0 LOG tcp -- ppp100 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 6/hour burst 5 LOG flags 0 level 1 prefix `Intrusion -> '
0 0 DROP all -- ppp100 * 0.0.0.0/0 0.0.0.0/0
58824 7517K FrwlOutChk all -- * * 0.0.0.0/0 0.0.0.0/0
Chain FrwlInChk (1 references)
pkts bytes target prot opt in out source destination
773 236K ACCEPT all -- ppp100 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
602 110K ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
197 15948 ACCEPT all -- lo * 0.0.0.0/0 0.0.0.0/0
1883 97916 ACCEPT udp -- * * 0.0.0.0/0 0.0.0.0/0 multiport dports 520
0 0 DROP tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:23
0 0 DROP udp -- br0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:23
0 0 DROP tcp -- br0 * 0.0.0.0/0 0.0.0.0/0 tcp dpt:161
0 0 DROP udp -- br0 * 0.0.0.0/0 0.0.0.0/0 udp dpt:161
33612 12M ACCEPT all -- br0 * 0.0.0.0/0 0.0.0.0/0
0 0 ACCEPT tcp -- ppp100 * 80.58.63.128/25 0.0.0.0/0 tcp dpt:7547
6 268 ACCEPT icmp -- ppp100 * 0.0.0.0/0 0.0.0.0/0 icmp type 8
0 0 ACCEPT tcp -- ppp100 * 80.58.63.128/25 0.0.0.0/0 tcp dpt:22
0 0 ACCEPT tcp -- ppp100 * 172.20.25.0/24 0.0.0.0/0 tcp dpt:22
0 0 ACCEPT tcp -- ppp100 * 172.20.45.0/24 0.0.0.0/0 tcp dpt:22
0 0 ACCEPT tcp -- ppp100 * 193.152.37.192/28 0.0.0.0/0 tcp dpt:22
0 0 ACCEPT tcp -- ppp100 * 80.58.63.128/25 0.0.0.0/0 tcp dpt:443
0 0 ACCEPT tcp -- ppp100 * 172.20.25.0/24 0.0.0.0/0 tcp dpt:443
0 0 ACCEPT tcp -- ppp100 * 172.20.45.0/24 0.0.0.0/0 tcp dpt:443
0 0 ACCEPT tcp -- ppp100 * 193.152.37.192/28 0.0.0.0/0 tcp dpt:443
99 4984 LOG tcp -- ppp100 * 0.0.0.0/0 0.0.0.0/0 tcp flags:0x17/0x02 limit: avg 6/hour burst 5 LOG flags 0 level 1 prefix `Intrusion -> '
3545 251K DROP all -- ppp100 * 0.0.0.0/0 0.0.0.0/0
Chain FrwlOutChk (13 references)
pkts bytes target prot opt in out source destination
Chain PORT_FORWARDING (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- ppp100 * 0.0.0.0/0 192.168.1.33 udp dpts:8001:8008
1 40 ACCEPT tcp -- ppp100 * 0.0.0.0/0 192.168.1.33 tcp dpts:8001:8008
Chain PORT_SCAN (0 references)
pkts bytes target prot opt in out source destination
Chain Parental_Ctrl (1 references)
pkts bytes target prot opt in out source destination
Chain UPNP_PRE (1 references)
pkts bytes target prot opt in out source destination
Chain VOIP_INPUT (2 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT udp -- eth0.3 * 0.0.0.0/0 10.23.129.250 udp dpt:5060
0 0 ACCEPT udp -- eth0.3 * 0.0.0.0/0 10.23.129.250 udp dpt:5060
Chain app_filter_chain (2 references)
pkts bytes target prot opt in out source destination
Chain ipfilter_chain (1 references)
pkts bytes target prot opt in out source destination
Chain url_filter_chain (1 references)
pkts bytes target prot opt in out source destination
#
Saludos