November 19, 2008 02:55am pst

1. shakoush... 43,187
2. Redimido 33,424
3. ravenpl 26,314
4. omarfarid 20,309
5. noci 20,234
6. Blaz 16,332
7. Nopius 14,750
8. ahoffmann 14,580
9. Mysidia 12,875
10. gheist 9,614
11. agriesser 8,850
12. DaveHowe 8,364
13. arrkerr1... 7,000
14. unSpawn 6,700
15. Tintin 6,315
16. MushyPea 5,460
17. chingmd 5,039
18. alextoft 5,000
19. WizRd-Li... 4,980
20. arnold 4,552
21. caterham... 4,500
22. edster9... 4,000
23. fridom 3,873
24. droyden 3,750
25. fosiul01 3,575

1. ahoffmann 188,276
2. ravenpl 109,652
3. jlevie 95,810
4. kblack05 65,801
5. Redimido 61,040
6. noci 47,238
7. shakoush... 45,687
8. Blaz 42,005
9. xDamox 32,605
10. omarfarid 32,479
11. Nopius 31,650
12. wesly_c... 31,085
13. decoleur 28,923
14. XoF 28,530
15. Tintin 25,155
16. slyong 21,932
17. pjedmond 21,733
18. Mysidia 20,470
19. chris_cal... 19,816
20. ppfoong 15,532
21. grblades 15,472
22. KeremE 12,500
23. rindi 11,948
24. mbarbos 11,763
25. dpiniella 11,462

08.19.2003 at 12:58PM PDT, ID: 20714224

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

6.2

Simple iptables config questions

Asked by oregonisonline in Linux Network Security

Tags: iptables, config, simple

Hello experts!

I'm extremely new to iptables. Running RH7.3
The ports listed below are the only ports that I want to have accessible from the internet. I would like to log dropped packets so I can block repeat offenders at our router. My logs dump to mysql on a remote server.

When I kick these in, all traffic stops.

Can someone point me in the right direction please.

iptables --flush
iptables --delete-chain

iptables -N INPUT
iptables -A INPUT -i lo -p all -j ACCEPT
iptables -A INPUT -p tcp --sport 20 -j ACCEPT
iptables -A INPUT -p tcp --sport 21 -j ACCEPT
iptables -A INPUT -p tcp --sport 25 -j ACCEPT
iptables -A INPUT -p tcp --sport 53 -j ACCEPT
iptables -A INPUT -p tcp --sport 80 -j ACCEPT
iptables -A INPUT -p tcp --sport 110 -j ACCEPT
iptables -A INPUT -p tcp --sport 365 -j ACCEPT
iptables -A INPUT -p tcp --sport 10000 -j ACCEPT
iptables -A INPUT -j DROP-AND-LOG

iptables -N OUTPUT
iptables -A OUTPUT -o
iptables -A OUTPUT -p tcp --sport 20 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 21 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 25 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 53 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 80 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 110 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 365 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 10000 -j ACCEPT
iptables -A OUTPUT -j DROP-AND-LOG

iptables -N DROP-AND-LOG
iptables -A DROP-AND-LOG -j LOG --log-level 1 --log-prefix 'MEGALON-DROPPED'
iptables -A DROP-AND-LOG -j DROPStart Free Trial

Keywords: Simple iptables config questions

	Title
1	IPTables, DNAT, SSH forwarding - …
2	iptables
3	iptables
4	IPTables
5	Simple iptables ruleset with port 80 fo…
6	Help editing iptables to allow outgoing …

Loading Advertisement...

20080716-EE-VQP-32

Simple iptables config questions

Asked by oregonisonline in Linux Network Security

Tags: iptables, config, simple

About this solution