| View previous topic :: View next topic |
| Author |
Message |
Paranoid
Apprentice
Joined: 07 Jan 2004
Posts: 290
Location: Portland, ME
|
 Posted: Sat May 01, 2004 4:59 am Post subject: opening ports |
 |
|
Running a rather simple iptables script right now:
| Code: | # Basic iptables initial setup
# Flush all chains to an empty state
iptables -F
# Set default policies
iptables -P FORWARD DROP
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
# Allow localhost/loopback
iptables -A INPUT -i lo -j ACCEPT
# Allow basic ICMP support
# Local ping, destination-unreachable
# (not required but speeds things up) &
# time-exceeded (traceroute)
iptables -A INPUT -p ICMP --icmp-type echo-reply -s 0/0 -i ppp0 -j ACCEPT
iptables -A INPUT -p ICMP --icmp-type destination-unreachable -s 0/0 -i ppp0 -j ACCEPT
iptables -A INPUT -p ICMP --icmp-type time-exceeded -s 0/0 -i ppp0 -j ACCEPT
# Allow input from already established connections
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -m state --state NEW -i ! ppp0 -j ACCEPT
# Log dropped packets
iptables -A INPUT -j LOG -m limit --limit 30/minute --log-prefix "Dropping: " |
Yeah, I know-no outbound filtering....
I'm trying to open up tcp 4662 & udp 4669 w/ the following:
iptables -A INPUT -p TCP --dport 4662 -s 0/0 -i ppp0 -j ACCEPT
iptables -A INPUT -p UDP --dport 4669 -s 0/0 -i ppp0 -j ACCEPT
with no luck. I'm trying to get the overnet client going after setting
>port 4662
>uport 4669
I get nowhere. What the hell am I doing wrong here?
Single PC, no network, DSL connection.
_________________
A paranoid is someone who knows a little of what's going on.
William S. Burroughs |
|
| Back to top |
|
 |
kpack
Tux's lil' helper
Joined: 29 Mar 2004
Posts: 137
|
| Posted: Sat May 01, 2004 12:51 pm Post subject: |
|
|
| Your new iptables rules look okay. Have you looked at the output of iptables-save to make sure the rules have been added? |
|
| Back to top |
|
|
Paranoid
Apprentice
Joined: 07 Jan 2004
Posts: 290
Location: Portland, ME
|
| Posted: Sat May 01, 2004 3:34 pm Post subject: |
|
|
Thanks for the reply kpack, I'm good now. Shouldn't be messing around with the PC when I've had too much to drink 
_________________
A paranoid is someone who knows a little of what's going on.
William S. Burroughs |
|
| Back to top |
|
|
|
Networking & Security
