MHR wrote:

> 15:06:00.485527 IP sushi.ocroads.com > khan.sjhtca.com: ICMP host
> sushi.ocroads.com unreachable - admin prohibited, length 68

Is there a firewall on sushi? Run iptables -L -n on it, it seems like
a firewall is blocking the connection.

If you don't have an explicit need for a firewall on sushi I'd suggest
ensuring that iptables is not running /etc/init.d/iptables stop

And verify the default settings of the firewall just incase it leaves them
in a reject state with the iptables -L -n command above, e.g.

# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination

Chain OUTPUT (policy ACCEPT)
target prot opt source destination


nate

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos

MHR wrote:

This is your problem:
> REJECT all -- 0.0.0.0/0 0.0.0.0/0
> reject-with icmp-host-prohibited


> I'm not entirely sure what all this means - pls see above. Is that
> what happened?

If you don't need iptables then stop the service and disable it:
chkconfig --level 2345 iptables off

Or you can add a rule to accept traffic for the particular port.

I don't know the specifics about adding rules to the built in firewall
I've always ditched the distribution specific firewalls and built my
own. I'm sure there are some docs out there somewhere though..

nate

_______________________________________________
CentOS mailing list
CentOS@centos.org
http://lists.centos.org/mailman/listinfo/centos