Open a range of ports with iptables

François Patte francois.patte at math-info.univ-paris5.fr
Mon May 29 08:00:05 UTC 2006


redhatdude at bellsouth.net a écrit :
> Hi,
> That didn't help much.
> Thanks anyway Mr. Patte
> Can anyone give me the complete command to open those range of ports  in
> the firewall?

/sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 21 -m state --state
NEW,ESTABLISHED -j ACCEPT

/sbin/iptables -A INPUT -i ppp0 -p tcp  --sport 21 -m state --state
ESTABLISHED -j ACCEPT

/sbin/iptables -A OUTPUT -o ppp0 -p tcp --dport 20 -m state --state
NEW,ESTABLISHED -j ACCEPT

/sbin/iptables -A INPUT -i ppp0 -p tcp  --sport 20 -m state --state
ESTABLISHED,RELATED -j ACCEPT

/sbin/iptables -A OUTPUT -o ppp0 -p tcp --sport 1024:65535 --dport
1024:65535 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

/sbin/iptables -A INPUT -i ppp0 -p tcp --sport 1024:65535 --dport
1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT

Each "double" line is in fact a single line.

Here, the range is not the one you want, but you can modify.

and, I insist, use man iptables, to fit exactly want you want, my
example, is for my use, this not perhaps what you want (input
connections are forbidden with these rules, only output and the answer
of a remote server is allowed).

> On May 29, 2006, at 3:05 AM, François Patte wrote:
> 
>> redhatdude at bellsouth.net a écrit :
>>
>>> Hello,
>>> I'd like to know what is the command to open a range of ports, let's
>>> say I wanna open from port 3000 to port 3100 for ftp transfers.
>>
>>
>> source ports: --sport 3000:3100
>>
>> destination ports: --dport 3000:3100
>>
>>> Thanks,
>>
>>
>> man iptables
>>
>> -- 
>> François Patte
>> UFR de mathématiques et informatique
>> Université René Descartes
>> http://www.math-info.univ-paris5.fr/~patte
>>
>> -- 
>> fedora-list mailing list
>> fedora-list at redhat.com
>> To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
> 
> 
> 


-- 
François Patte
UFR de mathématiques et informatique
Université René Descartes
http://www.math-info.univ-paris5.fr/~patte




More information about the fedora-list mailing list