Dear Sir,
I would like to post this message to the list to see if any
suggestion to my problem.
I have install a Linux web server with https service
putting to Internet with external address. The traffic coming from our web
application to the web server through web page which is access from outside. The
other way of traffic coming from our internet LAN network using ftp upload and
downlad files to the web server. Our web application is designed with ramdom
port for ftp access. That is no fix port number defined. The port 80 and 443 are
always open when start up the web server.
My question is do I have to open all ports using the following
commands in order to tailor for my ftp ramdom port access? Is there any
alternative way to set up?
$ iptables -A INPUT -p tcp -i eth0 -s 0/0 -d 0/0 --dport
0:65535 -j ACCEPT
$ iptables -A INPUT -p udp -i eth0 -s 0/0 -d 0/0 --dport 0:65535 -j ACCEPT When I set up these commands in the web server, it seems
block all the traffic from outside browser. What is your
suggestion?
Looking for your kind replay.
Albert |