Add port in firewall

mmhs · 02-20-2011, 04:46 AM

hey guys i have a simple question

how can i add a port number as a trust in firewall with command

i test iptables -A INPUT -p tcp --dport portnumber -j ACCEPT

but it cant help me

i want to add port from command same as gui
system ---->administration ---->security level and firewall --->add port

plz help me !!

kbp · 02-20-2011, 05:09 AM

When appending ('-A') rules, you need to know what the rule list looks like and what the policy is. Say your last rule is a 'drop all' type, then appending your rule as you did will fail.

# show current rules and policy
iptables -Ln --line-numbers

You'll probably need to insert ('-I') your new rule at a specific line, there are plenty of tutorials available so I won't drag this out any further

cheers

BoraxMan · 02-20-2011, 05:13 AM

Quote:

Originally Posted by mmhs

hey guys i have a simple question

how can i add a port number as a trust in firewall with command

i test iptables -A INPUT -p tcp --dport portnumber -j ACCEPT

but it cant help me

i want to add port from command same as gui
system ---->administration ---->security level and firewall --->add port

plz help me !!

Instead of using -A INPUT

use -I INPUT. THis inserts the rule at the top of the chail. You can also specify a position in the chain.

ie

iptables -I INPUT 3 -p tcp --dport 21 -j ACCEPT

But as to do it via GUI, it might help if you tell us what distribution you are running.

mmhs · 02-20-2011, 05:30 AM

Quote:

Originally Posted by BoraxMan

Instead of using -A INPUT

use -I INPUT. THis inserts the rule at the top of the chail. You can also specify a position in the chain.

ie

iptables -I INPUT 3 -p tcp --dport 21 -j ACCEPT

But as to do it via GUI, it might help if you tell us what distribution you are running.

thx man it help me

and i work with centos 5.5