Am 09.03.2013 14:29, schrieb davidschaak1@xxxxxxxxxxxxxxxxxxxxxxxxx: > Sorry about the last post. New phone and I am not used to sending emails from it. > Command line: iptables -A INPUT -p tcp -dport 20 -j ACCEPT results in error Bad argument 20 fix your typos WRONG: iptables -A INPUT -p tcp -dport 20 -j ACCEPT CORRECT: iptables -A INPUT -p tcp --dport 20 -j ACCEPT but my explanation why active FTP is generally wrong still is correct from the first reply _______________________ [root@srv-rhsoft:~]$ cat /scripts/iptables.sh | grep dport $IPTABLES -A INPUT -p udp --sport 67 --dport 68 -j ACCEPT $IPTABLES -A OUTPUT -p udp --sport 68 --dport 67 -j ACCEPT $IPTABLES -A INPUT ! -i lo -p tcp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A INPUT ! -i lo -p udp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A INPUT -m conntrack --ctstate RELATED -m helper --helper ftp -p tcp --dport 10000:10100 -j ACCEPT $IPTABLES -A FORWARD -i eth1 -p tcp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A FORWARD -i eth1 -p udp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A INPUT -p tcp --sport 1024: -s $RHSOFT_TESTSERVER --dport 25 -j ACCEPT $IPTABLES -A INPUT -p tcp -s $LAN_RHSOFT,$LAN_LOUNGE,$WAN_LOUNGE --dport 8000 -m conntrack --ctstate NEW --syn -j ACCEPT $IPTABLES -A INPUT -p tcp --sport 1024: -s $LAN_RHSOFT,$LAN_LOUNGE --dport $AVAHI_PORT -m conntrack --ctstate NEW --syn -j ACCEPT $IPTABLES -A INPUT -p udp --sport 1024: -s $LAN_RHSOFT,$LAN_LOUNGE --dport $AVAHI_PORT -m conntrack --ctstate NEW -j ACCEPT $IPTABLES -A INPUT -p udp -s $LAN_RHSOFT,$LAN_LOUNGE,$RHSOFT_ARRAKIS,$RHSOFT_TESTSERVER --sport 1024: --dport 123 -j ACCEPT $IPTABLES -A INPUT -p tcp --sport 1024: -s $OFFICE_VPN_IP,$RHSOFT_VPN_IP,$ESX1_MASTER,$OPENVAS --dport 3306 -m conntrack --ctstate NEW --syn -j ACCEPT $IPTABLES -A INPUT -p udp --sport 1024: -s $WAN_LOUNGE,$LAN_LOUNGE,$LAN_RHSOFT --dport 53 -j ACCEPT $IPTABLES -A INPUT -p tcp --sport 1024: -s $WAN_LOUNGE,$LAN_LOUNGE,$LAN_RHSOFT --dport 53 -j ACCEPT
Attachment:
signature.asc
Description: OpenPGP digital signature
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
