MSN: Princess Charlotte enjoys sports - but there's one she can't stand
Princess Charlotte is a royal with a passion for sports but the young member of The Firm has one sport she doesn't like. Princess Kate recently offered a glimpse into what it's like raising Princess ...
Wichita's largest indoor sports and adventure facility. Trampolines, basketball, volleyball, parties and events all under one roof.
First give a -p option like -p tcp or -p udp. Examples: iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j DROP iptables -A INPUT -p udp --dport 53 --sport 1024:65535 -j ACCEPT You could also try -p all but I've never done that and don't find too much support for it in the examples.
This can't be fixed with a stateless firewall without voiding the security the firewall is supposed to provide. One can't just add: udp sport 53 accept + tcp sport { 53, 443 } accept to allow DNS replies and HTTPS replies to work, because then any remote attack can use such source ports to access any ports and thus services on the VPS system.
Yahoo Sports: Charlotte Earn Dominant Game 1 Win, Receive Contributions From Several Panthers Call-Ups
Yahoo Sports: Charlotte FC’s undefeated home run snapped by Nashville SC: 1-2
let's look at these two iptables rules which are often used to allow outgoing DNS: iptables -A OUTPUT -p udp --sport 1024:65535 --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A
What you've been told is right, although you've written it wrong (you've forgotten --dport). iptables -A INPUT -p tcp --dport 1000:2000 will open up inbound traffic to TCP ports 1000 to 2000 inclusive. -m multiport --dports is only needed if the range you want to open is not continuous, eg -m multiport --dports 80,443, which will open up HTTP and HTTPS only - not the ones in between. Note that ...