(no subject)

[sesquipedality]

Ill. Firewall steadfastly refusing to accept incoming connections, even when told to. Since it's not logging the rejections, I can't even find out which part of the config is wrong. About to venture out of house in search of honey. Still hoping to be OK for cinema tonight. Illness has apparently caused highly terse writing style.

Comments

[ewx.livejournal.com]

Use "watch -n1 iptables -L -n -v" (or something similar) and watch the counters.

[sesquipedality.livejournal.com]

OK - now there's something weird. These packets are being trapped by the synflood protection rule.

I never knew about watch. What a phenominally useful command.

[sesquipedality.livejournal.com]

I lie. Red herring.

[sesquipedality.livejournal.com]

I'd actually prevented ssh from listening on the external interface, so the firewall was functioning fine. *sigh* All of this still fails to explain why the VPN isn't working.