All of lore.kernel.org
 help / color / mirror / Atom feed
From: Jacob Friis Larsen <jfl@list.idg.dk>
To: netfilter@lists.netfilter.org
Cc: Aleksandar Milivojevic <amilivojevic@pbl.ca>
Subject: Re: Port is open but I am unable to connect
Date: Thu, 09 Sep 2004 12:17:40 +0200	[thread overview]
Message-ID: <41402DC4.3030901@list.idg.dk> (raw)
In-Reply-To: <413EAAF6.5030804@list.idg.dk>

With the changes I still can't connect. I also use bonding if that's 
important.

<script>
#!/bin/sh

# Modules
modprobe ip_conntrack_ftp
modprobe ip_nat_ftp

# Defaults
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP

# Flush
iptables -t nat -F POSTROUTING
iptables -t nat -F PREROUTING
iptables -t nat -F OUTPUT
iptables -F

# STATE RELATED for router
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

# Localhost
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT

# Open ports on router for server/services
#iptables -A INPUT -s 1.2.3.4 -j ACCEPT -p tcp --dport 20 -m state 
--state NEW
iptables -A INPUT -s 1.2.3.4 -j ACCEPT -p tcp --dport 21 -m state 
--state NEW
iptables -A INPUT -s 1.2.3.4 -j ACCEPT -p tcp --dport 22 -m state 
--state NEW
iptables -A INPUT -j ACCEPT -p tcp --dport 25 -m state --state NEW
iptables -A INPUT -j ACCEPT -p tcp --dport 80 -m state --state NEW
iptables -A INPUT -j ACCEPT -p tcp --dport 143 -m state --state NEW
iptables -A INPUT -j ACCEPT -p tcp --dport 993 -m state --state NEW
</script>


  reply	other threads:[~2004-09-09 10:17 UTC|newest]

Thread overview: 10+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2004-09-07 19:27 Port is open but I am unable to connect Jacob Friis Larsen
2004-09-07 19:35 ` Sascha Reissner
2004-09-08  6:34   ` Jacob Friis Larsen
2004-09-07 20:19 ` Jason Opperisano
2004-09-08  6:38   ` Jacob Friis Larsen
2004-09-08 11:35     ` Jason Opperisano
2004-09-07 20:59 ` Aleksandar Milivojevic
2004-09-08  6:47   ` Jacob Friis Larsen
2004-09-09 10:17     ` Jacob Friis Larsen [this message]
2004-09-09 12:20       ` Jason Opperisano

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=41402DC4.3030901@list.idg.dk \
    --to=jfl@list.idg.dk \
    --cc=amilivojevic@pbl.ca \
    --cc=netfilter@lists.netfilter.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.