NS8 Firewall , iptables?

NethServer Version: 8
Module: FW ?

I have launched a telnet (with inetd) server on the machine, but I cant connect to it,

hosts.allow is configured .
iptables -L shows all ports open .

Is NS8 using a firewall other than “iptables” ? … iptables-nft returns too empty tables.

also, ftpd has the same issue (from inetd too)


root@com00:/usr/local/bin# ss -ntaup |grep :23
tcp   LISTEN    0      10                    0.0.0.0:23                 0.0.0.0:*     users:(("inetutils-inetd",pid=903890,fd=4))


root@com00:/usr/local/bin# iptables-nft -L
 Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
root@com00:/usr/local/bin# iptables -L
 Warning: iptables-legacy tables present, use iptables-legacy to see them
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
root@com00:/usr/local/bin# 

root@com00:/usr/local/bin# telnet 192.168.1.236
Trying 192.168.1.236...
Connected to 192.168.1.236.
Escape character is '^]'.

Linux 6.5.0-0.deb12.4-amd64 (com00.remi.lu) (pts/2)

com00 connexion :^CConnection closed by foreign host.
root@com00:/usr/local/bin# telnet localhost

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

Linux 6.5.0-0.deb12.4-amd64 (com00.remi.lu) (pts/2)

com00 connexion :^CConnection closed by foreign host.
root@com00:/usr/local/bin# 

root@files:~# telnet 192.168.1.236
Trying 192.168.1.236...
telnet: Unable to connect to remote host: No route to host
root@files:~# 

root@files:~# ssh 192.168.1.236
root@192.168.1.236's password:

Hello

firewalld is the key

firewall-cmd --list-all-zones
firewall-cmd --get-active-zone
firewall-cmd --zone=public --list-all

Merci !

firewalld is using nft ,
I got lured because iptables-nft returned nada …

any reason ? I always took it as a pseudo compatibility tool for “the elderly” … :slight_smile:

1 Like

iptables is going to die as soon as possible I bet…if even it is not done