Sorry about the last post. New phone and I am not used to sending emails from it.
Command line: iptables -A INPUT -p tcp -dport 20 -j ACCEPT results in error Bad argument 20.
What did I do wrong? Sent from my BlackBerry® smartphone powered by Mobilicity
Am 09.03.2013 14:29, schrieb davidschaak1@mobilicity.blackberry.com:
Sorry about the last post. New phone and I am not used to sending emails from it. Command line: iptables -A INPUT -p tcp -dport 20 -j ACCEPT results in error Bad argument 20
fix your typos
WRONG: iptables -A INPUT -p tcp -dport 20 -j ACCEPT CORRECT: iptables -A INPUT -p tcp --dport 20 -j ACCEPT
but my explanation why active FTP is generally wrong still is correct from the first reply _______________________
[root@srv-rhsoft:~]$ cat /scripts/iptables.sh | grep dport $IPTABLES -A INPUT -p udp --sport 67 --dport 68 -j ACCEPT $IPTABLES -A OUTPUT -p udp --sport 68 --dport 67 -j ACCEPT $IPTABLES -A INPUT ! -i lo -p tcp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A INPUT ! -i lo -p udp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A INPUT -m conntrack --ctstate RELATED -m helper --helper ftp -p tcp --dport 10000:10100 -j ACCEPT $IPTABLES -A FORWARD -i eth1 -p tcp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A FORWARD -i eth1 -p udp -m conntrack --ctstate NEW --dport 0 -j DROP $IPTABLES -A INPUT -p tcp --sport 1024: -s $RHSOFT_TESTSERVER --dport 25 -j ACCEPT $IPTABLES -A INPUT -p tcp -s $LAN_RHSOFT,$LAN_LOUNGE,$WAN_LOUNGE --dport 8000 -m conntrack --ctstate NEW --syn -j ACCEPT $IPTABLES -A INPUT -p tcp --sport 1024: -s $LAN_RHSOFT,$LAN_LOUNGE --dport $AVAHI_PORT -m conntrack --ctstate NEW --syn -j ACCEPT $IPTABLES -A INPUT -p udp --sport 1024: -s $LAN_RHSOFT,$LAN_LOUNGE --dport $AVAHI_PORT -m conntrack --ctstate NEW -j ACCEPT $IPTABLES -A INPUT -p udp -s $LAN_RHSOFT,$LAN_LOUNGE,$RHSOFT_ARRAKIS,$RHSOFT_TESTSERVER --sport 1024: --dport 123 -j ACCEPT $IPTABLES -A INPUT -p tcp --sport 1024: -s $OFFICE_VPN_IP,$RHSOFT_VPN_IP,$ESX1_MASTER,$OPENVAS --dport 3306 -m conntrack --ctstate NEW --syn -j ACCEPT $IPTABLES -A INPUT -p udp --sport 1024: -s $WAN_LOUNGE,$LAN_LOUNGE,$LAN_RHSOFT --dport 53 -j ACCEPT $IPTABLES -A INPUT -p tcp --sport 1024: -s $WAN_LOUNGE,$LAN_LOUNGE,$LAN_RHSOFT --dport 53 -j ACCEPT
Thank you. Sent from my BlackBerry® smartphone powered by Mobilicity
-----Original Message----- From: Reindl Harald h.reindl@thelounge.net Sender: users-bounces@lists.fedoraproject.org Date: Sat, 09 Mar 2013 14:40:44 To: users@lists.fedoraproject.org Reply-To: Community support for Fedora users users@lists.fedoraproject.org Subject: Re: Iptables problem