iptables issue Post: 302839405

Sponsored Content

Operating Systems Linux Ubuntu iptables issue Post 302839405 by babinlonston on Thursday 1st of August 2013 11:57:19 AM

08-01-2013

Registered User

iptables issue

Hi all ,

I Have Servers in remote location and now im setting up Some of the iptables fot that this is my finall steps in my servers and i need to open only 5 ports they are
80,443,9123,1985,22 And 22 Must want to be enabled for accesing it from my location , So here is the ip tables i have wrote , Please Review it and give me solution wether is in correct format for opening those 5 ports and all other ports need to be closed . Dos attack want to be Protected its too mentioned here please go throught it and give me solution

Code:

iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 9123 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW -m tcp --dport 1935 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT
iptables -A INPUT -j DROP

This last line Blocking every think .. how can i enable all the above ports and block all other .. did the line 6th one is right ? Suggest me please
After this only i need to configure failtoban ..

Last edited by DukeNuke2; 08-01-2013 at 01:08 PM..

babinlonston

View Public Profile for babinlonston

Visit babinlonston's homepage!

Find all posts by babinlonston

9 More Discussions You Might Find Interesting

1. UNIX for Dummies Questions & Answers

ps issue

HI All, Suddenly don't know what happened to redhat linux 7.2 any program start then itsn't listing while using ps -ef ex: ./xyz this xyz program pid not showing in ps-ef Pls let me know what is the reason for the same. Thanks a lot in advance Bache

2. Shell Programming and Scripting

Unix Arithmatic operation issue , datatype issue

Hi, I have a shell scripting. This will take 7 digit number in each line and add 7 digit number with next subsequent lines ( normal addition ). Eg: 0000001 0000220 0001235 0000022 0000023 ........... ......... ........ Like this i am having around 1500000 records. After adding...

3. UNIX for Dummies Questions & Answers

ISSUE and ISSUE.NET files

In LINUX(CentOS, RedHat) is there a way to have the banner statement appear before the logon instead of after the logon? In UNIX and Windows the banner appears before a person actually logs on, what I'm seeing in LINUX is that it appears after the login(ftp, telnet, SSH). Thanks

4. Shell Programming and Scripting

CP Issue

I want to copy large amount of files aproximately more than 20,000 files from one file system to another file system, but it gives me error like: #cd /opt/appserver/images #cp * /opt/appserver02/public/images Argument list is too long Also above mention error appear again when i run: ...

5. Shell Programming and Scripting

Need assistance with a file issue and a terminal issue

Hello everyone, I'm in need of some assistance. I'm currently enrolled in an introductory UNIX shell programming course and, well halfway through the semester, we are receiving our first actual assignment. I've somewhat realized now that I've fallen behind, and I'm working to get caught up, but for...

6. Shell Programming and Scripting

Variable value substitution issue with awk command issue

Hi All, I am using the below script which has awk command, but it is not returing the expected result. can some pls help me to correct the command. The below script sample.ksh should give the result if the value of last 4 digits in the variable NM matches with the variable value DAT. The...

7. Linux

iptables issue

Hi all, I'm trying to set up a virtual machine to act as a Windows host firewall. The basic idea is that the guest OS is configured on a sub with a router and the host is configured on another sub with the guest. I found this ancient iptables script and I did some minor mods to fit my network...

8. Shell Programming and Scripting

What could be the issue ?

Hi, when i am trying below script assume that below values are taken in code #!/bin/ksh if then echo usage: aNlist.sh QMGR NAME MQREQ fi NL=`echo 'dis qmgr'|runmqsc $1|grep REPOSNL|sed 's/.*REPOSNL$.*$.*/\1/' |cut -d'(' -f2|cut -d')' -f1` echo 'define nl('$NL_$2')...

9. Shell Programming and Scripting

Issue with wc -c and wc -m

Hi All, I have a small queries to get the character count i tried with wc -c and wc -m but its not returend current result For eg: wc -c wc -m echo "Name" | wc -c result: 5 but actually it should returned 4 Help me on this to ge the correct one. Thanks! ----------...

LEARN ABOUT SUSE

iptables-apply

iptables-apply(8)					      System Manager's Manual						 iptables-apply(8)

NAME

       iptables-apply - a safer way to update iptables remotely

SYNOPSIS

       iptables-apply [-hV] [-t timeout] ruleset-file

DESCRIPTION

       iptables-apply  will  try  to  apply  a new ruleset (as output by iptables-save/read by iptables-restore) to iptables, then prompt the user
       whether the changes are okay. If the new ruleset cut the existing connection, the user will not be able to answer  affirmatively.  In  this
       case, the script rolls back to the previous ruleset after the timeout expired. The timeout can be set with -t.

       When called as ip6tables-apply, the script will use ip6tables-save/-restore instead.

OPTIONS

       -t seconds, --timeout seconds
	      Sets the timeout after which the script will roll back to the previous ruleset.

       -h, --help
	      Display usage information.

       -V, --version
	      Display version information.

SEE ALSO

       iptables-restore(8), iptables-save(8), iptables(8).

LEGALESE

       iptables-apply is copyright by Martin F. Krafft.

       This manual page was written by Martin F. Krafft <madduck@madduck.net>

       Permission is granted to copy, distribute and/or modify this document under the terms of the Artistic License 2.0.

								    2006-06-04							 iptables-apply(8)