LimeWire P2P and ipTables (Restrictive Firewall)

win32sux · 10-08-2004, 01:54 PM

i'm looking for a good iptables rule (or set of rules) for letting limewire access the internet (from the LAN) when the policy is DROP...

i've tried stuff like this:

Code:

$IPT -A FORWARD -p TCP --dport 6346 -m state --state NEW -j ACCEPT

it works, but since anybody can make limewire listen on any port they want, i am VERY limited...

allowing all outgoing packets destined to non-privilaged ports isn't an option, as that would defeat the purpose of having a restrictive firewall...

so i'm trying to match the packets by source port range... something like:

Code:

$IPT -A FORWARD -p TCP --sport foo:bar -m state --state NEW -j ACCEPT

does anyone know limewire's source port range??

or perhaps a better way to go about this??

=)

tuxq · 10-09-2004, 03:31 PM

My guess on this is that you're trying to limit outgoing connections as well as incoming ...
Well there is one way to do what you want without bothering other people about their ports...
Use an application gateway (proxy) ...
that's the easiest way.