iptables to block port 25 only to a certain range Post: 302897064

10 More Discussions You Might Find Interesting

1. IP Networking

How to know port is block..

My server is running on a port 16386, in the case when this port is blocked by some other application ( anti virus etc. ) or firewall then how do i know it's block? Is bind will return any specific error in this case. I have to know is it blocked or not?

2. IP Networking

How to block a port

Hi, i faced a problem, where i have to block a port, therefore nobody used it, evenwith SO_REUSEADDR flag. How can i achive it.

3. AIX

TCP/UDP port range for default AIX NFS?

May I know what is the TCP/UCP port range for any default AIX NFS? Based on rpcinfo -p, I got the following output: program vers proto port service 100000 4 udp 111 portmapper 100000 3 udp 111 portmapper 100000 2 udp 111 portmapper 100000 4 ...

4. UNIX for Advanced & Expert Users

Ip And Port Divertion Through Iptables

Hi To All, I want to Route my web application to Mysql Database through a proxy server.so for this which approach should i use 1)iptables 2)squid if Iptables how can i make this worked .this is the ip network i'm having web application---------Proxy server-----------------Mysql Database...

5. Shell Programming and Scripting

Block local and remote port with iptables - Script BASH

Hello I'm beginner in the linux scripting and i would like to get help. I want to create a script that can block one or more Port even see all the TCP port. The ports must be blocked even when starting my machine. Of course requires a second script which will allow the ports that you want to...

6. AIX

Allow port range using IPsec?

Hi Guys, Please could you tell me if it is possible to have a single rule/filter to allow a certain port range instead of a separate rule for each port? I'm sure it must be possible but I am unable to find the syntax. Thanks Chris

7. Red Hat

Which is the effective ephemeral port range in Linux 2.6 for this set up?

In my Linux system ephemeral port range is showing different ranges as follows $ cat /proc/sys/net/ipv4/ip_local_port_range 32768 61000  cat /etc/sysctl.conf | grep net.ipv4.ip_local_port_range net.ipv4.ip_local_port_range = 9000 65500 Which will be the effective ephemeral port...

8. Red Hat

iptables help for port 80

Hi I enable the IPtables but port 80 was not working. Below is my active configuration

9. AIX

Forcing named 9 to use a fixed ephemeral port range

I'll start with I'm not an AIX expert, I inherited a lot of AIX servers to maintain. My problem is on AIX 7.1 TL4 SP4 environments. I'm running named as a DNS forwarder only to internal DNS servers. These AIX servers have a customized UDP ephemeral port range to avoid conflicting with the...

10. UNIX for Beginners Questions & Answers

Bash script, find the next closed (not in use) port from some port range.

hi, i would like to create a bash script that check which port in my Linux server are closed (not in use) from a specific range, port range (3000-3010). the print output need to be only 1 port, and it will be nice if the output will be saved as a variable or in same file. my code is: ...

LEARN ABOUT DEBIAN

shorewall-routestopped

SHOREWALL-ROUTESTOP(5)						  [FIXME: manual]					    SHOREWALL-ROUTESTOP(5)

NAME

       routestopped - The Shorewall file that governs what traffic flows through the firewall while it is in the 'stopped' state.

SYNOPSIS

       /etc/shorewall/routestopped

DESCRIPTION

       This file is used to define the hosts that are accessible when the firewall is stopped or is being stopped.

	   Warning
	   Changes to this file do not take effect until after the next shorewall start or shorewall restart command.

       The columns in the file are as follows (where the column name is followed by a different name in parentheses, the different name is used in
       the alternate specification syntax).

       INTERFACE - interface
	   Interface through which host(s) communicate with the firewall

       HOST(S) (hosts) - [-|address[,address]...]
	   Optional. Comma-separated list of IP/subnet addresses. If your kernel and iptables include iprange match support, IP address ranges are
	   also allowed.

	   If left empty or supplied as "-", 0.0.0.0/0 is assumed.

       OPTIONS - [-|option[,option]...]
	   Optional. A comma-separated list of options. The order of the options is not important but the list can contain no embedded whitespace.
	   The currently-supported options are:

	   routeback
	       Set up a rule to ACCEPT traffic from these hosts back to themselves. Beginning with Shorewall 4.4.9, this option is automatically
	       set if routeback is specified in shorewall-interfaces[1] (5) or if the rules compiler detects that the interface is a bridge.

	   source
	       Allow traffic from these hosts to ANY destination. Without this option or the dest option, only traffic from this host to other
	       listed hosts (and the firewall) is allowed. If source is specified then routeback is redundant.

	   dest
	       Allow traffic to these hosts from ANY source. Without this option or the source option, only traffic from this host to other listed
	       hosts (and the firewall) is allowed. If dest is specified then routeback is redundant.

	   notrack
	       The traffic will be exempted from conntection tracking.

       PROTO (Optional) - protocol-name-or-number
	   Protocol.

       DEST PORT(S) (dport) - service-name/port-number-list
	   Optional. A comma-separated list of port numbers and/or service names from /etc/services. May also include port ranges of the form
	   low-port:high-port if your kernel and iptables include port range support.

       SOURCE PORT(S) (sport) - service-name/port-number-list
	   Optional. A comma-separated list of port numbers and/or service names from /etc/services. May also include port ranges of the form
	   low-port:high-port if your kernel and iptables include port range support.

	   Note
	   The source and dest options work best when used in conjunction with ADMINISABSENTMINDED=Yes in shorewall.conf[2](5).

EXAMPLE

       Example 1:

		       #INTERFACE      HOST(S)		       OPTIONS	       PROTO	      DEST	 SOURCE
		       #								      PORT(S)	 PORT(S)
		       eth2	       192.168.1.0/24
		       eth0	       192.0.2.44
		       br0	       -		       routeback
		       eth3	       -		       source
		       eth4	       -		       notrack	      41

FILES

       /etc/shorewall/routestopped

SEE ALSO

       http://shorewall.net/starting_and_stopping_shorewall.htm

       http://shorewall.net/configuration_file_basics.htm#Pairs

       shorewall(8), shorewall-accounting(5), shorewall-actions(5), shorewall-blacklist(5), shorewall-hosts(5), shorewall_interfaces(5),
       shorewall-ipsets(5), shorewall-maclist(5), shorewall-masq(5), shorewall-nat(5), shorewall-netmap(5), shorewall-params(5),
       shorewall-policy(5), shorewall-providers(5), shorewall-proxyarp(5), shorewall-rtrules(5), shorewall-rules(5), shorewall.conf(5),
       shorewall-secmarks(5), shorewall-tcclasses(5), shorewall-tcdevices(5), shorewall-tcrules(5), shorewall-tos(5), shorewall-tunnels(5),
       shorewall-zones(5)

NOTES

	1. shorewall-interfaces
	   http://www.shorewall.net/manpages/shorewall-interfaces.html

	2. shorewall.conf
	   http://www.shorewall.net/manpages/shorewall.conf.html

[FIXME: source] 						    06/28/2012						    SHOREWALL-ROUTESTOP(5)