$IPTABLES -A OUTPUT -p tcp -m multiport --source-port 22,23,24,80 -j ACCEPTHi, I have Linux machine with single Network interface. I want to block all the tcp,udp and icmp port's other then 22,23,24 and 80. Can you verify the following script? IPTABLES=/sbin/iptables $IPTABLES -P INPUT DROP $IPTABLES -P OUTPUT DROP $IPTABLES -P FORWARD DROP $IPTABLES -A INPUT -p tcp -m multiport --destination-port 22,23,24,80 -j ACCEPT $IPTABLES -A INPUT -p udp -m multiport --destination-port 22,23,24,80 -j ACCEPT What port should I block for icmp protocol? -SR You have to add the following rules to enable the communication.
$IPTABLES -A OUTPUT -p udp -m multiport --source-port 22,23,24,80 -j ACCEPT
-- Regards Dharmendra.T This message is intended for the addressee only. It may contain privileged or Confidential information. If you have received this message in error,please notify the sender and destroy the message immediately.Unauthorised use or reproduction of this message is strictly prohibited. |
