This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

strange rule on AUTO_INPUT chain...

Hi all,

I found a strange and alarming rule of AUTO_INPUT chain on "Current System Packet Filter Rules":

0     0 ACCEPT  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0           tcp spts:1:65535 dpt:3840 ACCEPT

After some investigations I found this link http://www.networkuptime.com/library/tcp_udp_ports.html
and this information:
....
flirtmitmir     3840/tcp   www.FlirtMitMir.de
flirtmitmir     3840/udp   www.FlirtMitMir.de
....

So, what is it?!?! This rule can't be made by me because is on AUTO_INPUT chain.

I found this strange configuration only in those ASLs that they migrated from v.5 to v.6
Anybody found this?

This thread was automatically locked due to age.

Parents

0 mdallagi over 19 years ago

ok, I found that port 3840 is associated to spamhttpd service...but why is it opened to the world?
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 19 years ago in reply to mdallagi

-->Proxy-->Proxy-Contenct-Manager-->Daily Spam Digest

Allow requests from: ...

If theres Any in it, it will be allowed from Any.
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 19 years ago in reply to NimmdirKeks

Hi NimmdirKeks,

the fact is that "Daily Spam Digest" is not enabled...
So why is there that rule on iptables?
Cancel
Vote Up 0 Vote Down

Cancel
0 DrMabuse over 19 years ago in reply to mdallagi

you are right. as long as "User-Spam-Releasing" is enabled, this rule is still on. Deactivate the "'Spam releasing" inside the "Daily Spam Digest". I will report this problem to Astaro.
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 19 years ago in reply to DrMabuse

Hi,

Another sub-feautre that dosen't get deactivatet if you turn off the main-feature.
Like you can't delete a definition when it is still used in an deactivated feature, eg. pop3 proxy.
activate pop3 proxy - put an allowed network in there - deactivate pop3 proxy - try to delete the definition of the allowed network :-)
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 NimmdirKeks over 19 years ago in reply to DrMabuse

Hi,

Another sub-feautre that dosen't get deactivatet if you turn off the main-feature.
Like you can't delete a definition when it is still used in an deactivated feature, eg. pop3 proxy.
activate pop3 proxy - put an allowed network in there - deactivate pop3 proxy - try to delete the definition of the allowed network :-)
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 mdallagi over 19 years ago in reply to NimmdirKeks

Hi NimmdirKeks,

I had already solved this problem.
I hope that Astaro will solve this problem with next releases...
Cancel
Vote Up 0 Vote Down

Cancel