Re: [Vserver] HOWTO deal with NAT'ing firewalls and source-based routing with vservers

From: Jairo Enrique Serrano Castaņeda <jairo.serrano_at_gmail.com>
Date: Thu 16 Feb 2006 - 18:26:44 GMT
Message-ID: <4ac96a220602161026k25dd9281u621cbe19a0c3a124@mail.gmail.com>

the server works.. but not the jabberd2, not ejabberd... wilfire (made in
java 1.5)--- and the server now have a real IP.... stranger's thinks...

On 2/13/06, Jairo Enrique Serrano Castaņeda <jairo.serrano@gmail.com> wrote:
>
> Jabberd Virtual Server:
>
> jabberd:/# netstat -ta
> > Active Internet connections (servers and established)
> > Proto Recv-Q Send-Q Local Address Foreign Address
> > State
> > tcp 0 0 jabberd.unitecnolo:5347 *:*
> > LISTEN
> > tcp 0 0 jabberd.uni:xmpp-client *:*
> > LISTEN
> > tcp 0 0 jabberd.unitecnol:mysql *:*
> > LISTEN
> > tcp 0 0 jabberd.uni:xmpp-server *:*
> > LISTEN
> > tcp 0 0 jabberd.unitecnolo:5347 localhost:36402
> > ESTABLISHED
> > tcp 0 0 jabberd.unitecnolo:5347 localhost:36403
> > ESTABLISHED
> > tcp 0 0 jabberd.unitecnolo:5347 localhost:36400
> > ESTABLISHED
> > tcp 0 0 jabberd.unitecnolo:5347 localhost:36401
> > ESTABLISHED
> > tcp 0 0 localhost:36400 jabberd.unitecnolo:5347
> > ESTABLISHED
> > tcp 0 0 localhost:36401 jabberd.unitecnolo:5347
> > ESTABLISHED
> > tcp 0 0 localhost:36402 jabberd.unitecnolo :5347
> > ESTABLISHED
> > tcp 0 0 localhost:36403 jabberd.unitecnolo:5347
> > ESTABLISHED
> >
> >
> Main Server:
>
> > # iptables -L
> > Chain INPUT (policy ACCEPT)
> > target prot opt source destination
> > ACCEPT all -- anywhere anywhere state
> > RELATED,ESTABLISHED
> > ACCEPT tcp -- anywhere anywhere tcp
> > dpt:xmpp-client
> >
> > Chain FORWARD (policy ACCEPT)
> > target prot opt source destination
> >
> > Chain OUTPUT (policy ACCEPT)
> > target prot opt source destination
> > ACCEPT all -- anywhere anywhere state
> > RELATED,ESTABLISHED
>
>
> # iptables -t nat -L
> > Chain PREROUTING (policy ACCEPT)
> > target prot opt source destination
> > DNAT tcp -- anywhere savio tcp dpt:ftp
> > to:192.168.1.3:21
> > DNAT tcp -- anywhere savio tcp
> > dpt:ftp-data to: 192.168.1.3:20
> > DNAT tcp -- anywhere savio tcp
> > dpts:5000:x11 to:192.168.1.3:5000-6000
> > DNAT tcp -- anywhere savio tcp
> > dpt:10000 to: 192.168.1.3:10000
> > DNAT tcp -- anywhere anywhere tcp
> > dpt:xmpp-client to:192.168.1.10:5222
> >
> > Chain POSTROUTING (policy ACCEPT)
> > target prot opt source destination
> > SNAT all -- jabberd anywhere to:
> > 172.16.3.106
> >
> > Chain OUTPUT (policy ACCEPT)
> > target prot opt source destination
> >
> >
> # telnet 192.168.1.10 5222
> > Trying 192.168.1.10.. .
> > Connected to 192.168.1.10.
> > Escape character is '^]'.
> > bad
> > <stream:stream xmlns:stream='http://etherx.jabber.org/streams' version='
> > 1.0'><stream:error xmlns:stream='http://etherx.jabber.org/streams'<http://etherx.jabber.org/streams%27>><xml-not-well-formed
> > xmlns='urn:ietf:params:xml:ns:xmpp-streams'/><text
> > xmlns='urn:ietf:params:xml:ns:xmpp-streams'>syntax
> > error</text></stream:error></stream:stream>Connection closed by foreign
> > host.
> >
>
> any network pc:
>
> > jsubuntu:~$ telnet savio.unitecnologica.edu.co 5222
> > Trying 200.106.130.230...
> > telnet: Unable to connect to remote host: Connection refused
>
>
>
>
> --
> Jairo Enrique Serrano Castaņeda
> Ingeniero de Sistemas UTB
> T - http://www.jsnat.com - http://savio.unitecnologica.edu.co
> C - http://www.drupal.org.es - http://www.champetux.org
>

--
Jairo Enrique Serrano Castaņeda
Ingeniero de Sistemas UTB
T - http://www.jsnat.com - http://savio.unitecnologica.edu.co
C - http://www.drupal.org.es - http://www.champetux.org

_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Thu Feb 16 18:27:16 2006

[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Thu 16 Feb 2006 - 18:27:23 GMT by hypermail 2.1.8