From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Dharmendra.T" Subject: Re: Liaise with port forwarding proxies? Date: 08 Sep 2003 11:38:41 +0530 Sender: netfilter-admin@lists.netfilter.org Message-ID: <1063001331.831.35.camel@india.nsecure.net> References: <20030905194710.A375.ATNAK@chejz.com> <1062762797.1164.8.camel@india.nsecure.net> <20030906003513.A37B.ATNAK@chejz.com> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="=-djDYm1m3IGB1LPZ3z4gt" Return-path: In-Reply-To: <20030906003513.A37B.ATNAK@chejz.com> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: Atsushi Nakagawa Cc: netfilter@lists.netfilter.org --=-djDYm1m3IGB1LPZ3z4gt Content-Type: text/plain Content-Transfer-Encoding: 7bit On Fri, 2003-09-05 at 20:35, Atsushi Nakagawa wrote: "Dharmendra.T" wrote: > Can you say more clearly what you are trying? I have a linux server with services and an iptables configuration set to discard any NEW incoming packets that aren't for these services. I do this based on protocol and port. (e.g. Accept: TCP/80, TCP/21) I want to add a SOCKS5 server (Dante) to the list of services. The problem with this is that this server can listen to any arbitary port above 1024 for port tunneling, but I don't want to automatically allow all ports > 1024 in iptables. I'm wondering if there is a way for iptables to determine which ports are in use by the SOCKS5 server and selectively allow those. You can allow related packets. Regards, -- Atsushi Nakagawa Changes are made when there is inconvenience. -- Regards Dharmendra.T dharmu@nsecure.net This message is intended for the addressee only. It may contain privileged or Confidential information. If you have received this message in error,please notify the sender and destroy the message immediately.Unauthorised use or reproduction of this message is strictly prohibited. --=-djDYm1m3IGB1LPZ3z4gt Content-Type: text/html; charset=utf-8 On Fri, 2003-09-05 at 20:35, Atsushi Nakagawa wrote:

"Dharmendra.T" <dharmu@nsecure.net> wrote:
> Can you say more clearly what you are trying?

I have a linux server with services and an iptables configuration set to
discard any NEW incoming packets that aren't for these services.  I do
this based on protocol and port.  (e.g. Accept: TCP/80, TCP/21)

I want to add a SOCKS5 server (Dante) to the list of services.  The
problem with this is that this server can listen to any arbitary port
above 1024 for port tunneling, but I don't want to automatically allow
all ports > 1024 in iptables.

I'm wondering if there is a way for iptables to determine which ports
are in use by the SOCKS5 server and selectively allow those.

You can allow related packets.


Regards,


-- 
Atsushi Nakagawa
<atnak@chejz.com>
Changes are made when there is inconvenience.

-- 
Regards
Dharmendra.T
dharmu@nsecure.net

This message is intended for the addressee only. It may contain privileged or Confidential information. If you have received this message in error,please notify the sender and destroy the message immediately.Unauthorised use or reproduction of this message is strictly prohibited.

--=-djDYm1m3IGB1LPZ3z4gt--