LinuxQuestions.org - iptables configuration

- Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)

- - iptables configuration (https://www.linuxquestions.org/questions/linux-security-4/iptables-configuration-357516/)

iptables configuration

Hello

i cannot understand something thereofore clarification is
required and would be really appreciated.

I've got all the chains (input,forword,output) by default to drop

to use amule i have opened 4662 tcp and udp

when i go to grc.com and scan my ip everything is stealthed
when emule setting is commended hence does not work

but when amule hall works grc.com reports all my ports
closed rather than stealthed as before and 631 and 113 ports are
reporting open.

the rule to amule function properly is as follows:

IPTABLES -A INPUT -p tcp --dport 4662 -j ACCEPT
IPTABLES -A INPUT -p udp --dport 4662 -j ACCEPT

ok i can understand 4662 to listen open but why the rest of them

thanks

631 is ipp (internet printing - printer sharing), 113 is ident. Standard but should not be there is they're blocked (check it twice). See yourself if they're blocked. Comment out the rule to accept connections on 'lo' interface (if you have such one) and run
telnet 127.0.0.1 113
and later
telnet 127.0.0.1 631
What do you get from the commands? Error is a good thing.

i get the followings

Code:

telnet 127.0.0.1 113

Trying 127.0.0.1...

Connected to 127.0.0.1.

Escape character is '^]'.

Code:

telnet 127.0.0.1 631

Trying 127.0.0.1...

Connected to 127.0.0.1.

Escape character is '^]'.

It means they're open. That's not good. Run 'netstat' and see which services have open ports. Do you have cups or samba?