* question about opening a port
@ 2006-07-31 19:19 Peter Horst
2006-08-04 12:44 ` Martijn Lievaart
0 siblings, 1 reply; 2+ messages in thread
From: Peter Horst @ 2006-07-31 19:19 UTC (permalink / raw)
To: netfilter
Hello - if someone has a second, I could really use some help. I'm
trying to open a port (in addition to the ones already open) in order to
allow DNS traffic (port 53), both UDP and TCP. Does the following
iptables script look right for this purpose?
Thanks very much.
Chain RH-Firewall-1-INPUT (2 references)
num target prot opt source destination
1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp
type 255
3 ACCEPT esp -- 0.0.0.0/0 0.0.0.0/0
4 ACCEPT ah -- 0.0.0.0/0 0.0.0.0/0
5 ACCEPT udp -- 0.0.0.0/0 224.0.0.251 udp
dpt:5353
6 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53
7 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53
8 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp
dpt:631
9 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp
dpt:631
10 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
RELATED,ESTABLISHED
11 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:22
12 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:25
13 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:80
14 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:443
15 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state
NEW tcp dpt:53
16 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 state
NEW udp dpt:53
17 REJECT all -- 0.0.0.0/0 0.0.0.0/0
reject-with icmp-host-prohibited
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: question about opening a port
2006-07-31 19:19 question about opening a port Peter Horst
@ 2006-08-04 12:44 ` Martijn Lievaart
0 siblings, 0 replies; 2+ messages in thread
From: Martijn Lievaart @ 2006-08-04 12:44 UTC (permalink / raw)
To: Peter Horst; +Cc: netfilter
<citaat van="Peter Horst">
> Hello - if someone has a second, I could really use some help. I'm
> trying to open a port (in addition to the ones already open) in order to
> allow DNS traffic (port 53), both UDP and TCP. Does the following
> iptables script look right for this purpose?
>
> Thanks very much.
>
> Chain RH-Firewall-1-INPUT (2 references)
> num target prot opt source destination
> 1 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
> 2 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp
> type 255
Better post the output of iptables-save, this output has not enough
information.
M4
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2006-08-04 12:44 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-07-31 19:19 question about opening a port Peter Horst
2006-08-04 12:44 ` Martijn Lievaart
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox