Free radius installation

José Campos jjscampos at gmail.com
Sun Jan 24 15:23:55 CET 2010


I think that-s everything ok with iptables as you can see:
...
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 1812 -j ACCEPT
-A INPUT -m state --state NEW -m udp -p udp --dport 1813 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
...

But I do not understand why this output of nmap localhost, after radiusd -X
...
Interesting ports on localhost (127.0.0.1):
Not shown: 998 closed ports
PORT    STATE SERVICE
22/tcp  open  ssh
111/tcp open  rpcbind

Nmap done: 1 IP address (1 host up) scanned in 0.07 seconds
...
Should port 1812,1813,1814 be list on and open ?


         José Campos

-----Mensagem original-----
De: freeradius-users-bounces+jjscampos=gmail.com at lists.freeradius.org
[mailto:freeradius-users-bounces+jjscampos=gmail.com at lists.freeradius.org]
Em nome de Alan Buxey
Enviada: sábado, 23 de Janeiro de 2010 20:51
Para: FreeRadius users mailing list
Assunto: Re: Free radius installation

Hi,

>                 What is wrong with it? Can someone help me.

iptables ? check /etc/sysconfig/iptables and ensure that UDP 1812 and UDP
1813 are allowed

alan
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html





More information about the Freeradius-Users mailing list