On Mon, 29 May 2006 11:59:55 -0400 redhatdude@xxxxxxxxxxxxx wrote: > > On May 29, 2006, at 4:00 AM, François Patte wrote: > > > redhatdude@xxxxxxxxxxxxx a écrit : > >> Hi, > >> That didn't help much. > >> Thanks anyway Mr. Patte > >> Can anyone give me the complete command to open those range of > >> ports in > >> the firewall? > > > > /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 21 -m state --state > > NEW,ESTABLISHED -j ACCEPT > > > > /sbin/iptables -A INPUT -i ppp0 -p tcp --sport 21 -m state --state > > ESTABLISHED -j ACCEPT > > > > /sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 20 -m state --state > > NEW,ESTABLISHED -j ACCEPT > > > > /sbin/iptables -A INPUT -i ppp0 -p tcp --sport 20 -m state --state > > ESTABLISHED,RELATED -j ACCEPT > > > > /sbin/iptables -A OUTPUT -o ppp0 -p tcp --sport 1024:65535 --dport > > 1024:65535 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT > > > > /sbin/iptables -A INPUT -i ppp0 -p tcp --sport 1024:65535 --dport > > 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT > > > > Each "double" line is in fact a single line. > > > > Here, the range is not the one you want, but you can modify. > > > > and, I insist, use man iptables, to fit exactly want you want, my > > example, is for my use, this not perhaps what you want (input > > connections are forbidden with these rules, only output and the answer > > of a remote server is allowed). > > > That did it. Thanks a lot. > I have no knowledge of iptables and I wasn't sure how to specify a > range of ports using the GUI in FC5. > Will (CodeHead), I used google to try to find the answer before > posting here. Next time I'd appreciate a more helpful answer from > you. The purpose of this mailing list is to help those who are less > knowledgeable, not to lecture them. > Thanks for the help guys. > EJ > EJ, But that is OK IF other people can tell others to use google. You *did not* say you tried google in your OP. So I guess it was wrong to ask??????? So I guess others can tell other people not to top post???? Will
Attachment:
signature.asc
Description: PGP signature
-- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
