iptables question need help


 
Thread Tools Search this Thread
Operating Systems Linux iptables question need help
# 1  
Old 04-25-2008
iptables question need help

Description
i used iptables firewall is a month,running is favorable.it is failed when i connecting to my server on time.the servers' web service and all ports did not connect.i remote login the other server and through intranet address login this server then i restart iptables .but through internet still could not connect.
I do not know .why ?i tested my iptables rules on other server.at works well.

the iptables rule following

iptables #!/bin/bash
iptables -F
iptables -Z
iptables -X
wlc_addr=158.61.161.183
lc_addr=192.168.1.233
lo_addr=127.0.0.1
iptables -P OUTPUT ACCEPT
iptables -P INPUT DROP
iptables -P FORWARD ACCEPT
iptables -A INPUT -p ALL -s $lc_addr -d $lc_addr -j ACCEPT
iptables -A INPUT -p ALL -s $wlc_addr -d $wlc_addr -j ACCEPT
iptables -A INPUT -p ALL -s $lo_addr -d $lo_addr -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 22 -j ACCEPT
-A INPUT -i eth1 -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 28888 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 28888 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 8888 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --dport 37946 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7891 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7890 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7911 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 25 -j ACCEPT
iptables -A INPUT -i eth1 -p udp --sport 53 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 7910 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 65100 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 10123 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 1521 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp --sport 5511 -j ACCEPT
iptables -A INPUT -i eth0 -p ALL -s 192.168.1.232 -d 192.168.1.233 -j ACCEPT
iptables -A INPUT -p ALL -s 192.168.1.232 -d 192.168.1.233 -j ACCEPT
iptables -A INPUT -p ALL -s 158.61.161.182 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 211.138.225.168 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 218.246.35.15 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 211.138.238.11 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 210.72.145.14 -d 158.61.161.183 -j ACCEPT
iptables -A INPUT -p ALL -s 211.138.224.53 -d 158.61.161.183 -j ACCEPT
Login or Register to Ask a Question

Previous Thread | Next Thread

8 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Multi-table iptables Question

I have a question regarding IPTables packet flow, that I am hoping I can get an answer to. We have a fairly advanced implementation of IPTables that I am trying to convert into a third party product and I am not quite certain on the packet flow in the current IPTables implementation. We are... (2 Replies)
Discussion started by: knightfirefx
2 Replies

2. IP Networking

iptables question

I have two programs, a datagram socket based sender and a datagram socket based receiver. The sender emits a short UDP message to 192.168.0.100:33333 every second. The receiver creates a datagram socket with a default port number (let's say it is 44444), clears the iptables adds the following rule:... (4 Replies)
Discussion started by: michaelrusse
4 Replies

3. Cybersecurity

iptables question.

I am setting up a new squid daemon to run on my server. I want to make sure that everyone inside my network can access squid but I want to make sure everyone on the internet is blocked. eth0 is connected to my internal LAN via: 192.168.0.5/255.255.255.0 eth1 is connected to the internet via:... (1 Reply)
Discussion started by: nondescriptciti
1 Replies

4. UNIX for Dummies Questions & Answers

help with iptables

Hi, On the IPTABLES, I did iptables --flush. I want to start fresh. Now I only want two things. Allow one ip address to this server. Allow port 443 as incoming from every where. Please advice how to do this. This is what I did so for. iptables -I INPUT -i eth0 -s 1.2.3.4 -j ACCEPT... (5 Replies)
Discussion started by: samnyc
5 Replies

5. IP Networking

IPTables question

Hope someone can help cus m really stuck. Im pretty good at making basic IPTables rules to get what i need done, but this one has me beat. I have only 1 Nic in my linux box , and its setup as a trunk to my switch. I have 5 vlans setup on it: eth0.1000 eth0.1001 eth0.1002 eth0.1003... (0 Replies)
Discussion started by: UKShark
0 Replies

6. IP Networking

Iptables

What should be the iptables rule so that only the subnet 64.61.11.224/255.255.255.248 may access the mysql port 3306 (1 Reply)
Discussion started by: proactiveaditya
1 Replies

7. IP Networking

Need help with iptables

Trying to create a whitelist to limit bandwidth. My sync speed is 1536/256 kbps. Simple rules in order: 1. Do not limit (or set to 1536/256) MAC 00:00:00:00:00 (computer is in 192.168.1.0/24). 2. Do not limit (or set to 1536/256) MAC 00:00:00:00:01 (computer is in 192.168.1.0/24). 3. Do not... (1 Reply)
Discussion started by: kripz
1 Replies

8. IP Networking

IPtables

Hey guys, I have just started using IP tables and was wondering if anyone could direct me to any good online resources as I am totally new to this. Thanks. (1 Reply)
Discussion started by: 182x
1 Replies
Login or Register to Ask a Question