On Fri, 2002-03-08 at 09:08, Dumas Patrice wrote:

> [ repeated 4 times ]
> sherkan.tuxfamily.net:  *Timeout*
> 
> I think the problem lies on my side because these are public timeservers for my
> zone. I think I have no firewall on my computer. And I don't administer the one
> which are on the way. However, it seems to me that they accept any outgoing
> connection. Is there a need for ingoing connection for ntp ? 
> 
> What could I do to understand what happens ? Is there any tool which could be
> used to follow a packet and know where a firewall blocked it ?

Are you using ipchains for your firewall?  It is the default for RH 7x.
If so take a look at the output of ipchains -nvL.  This will list all
the rules inplace with counters that increment each time a rule is used
you can look before and after a service ntp restart to see if it is a
rule on your box keeping it from getting back to you.

I usually turn logging on on my deny/reject rules so I can see what is
being stopped.

The rules live in /etc/sysconfig/ipchains I believe and adding a -l to
the rules of interest will cause an entry into /var/log/messages each
time a rule is hit.

Bret



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to