iptable rule in Chain RH-Firewall-1

ramecare · 03-10-2011, 10:09 PM

Gud day to all,

Can any one tell me the command for iptable rule to add in Chain RH-Firewall-1 to block ftp port & the ftp server was configured in public ip address,i searched in google but i did'nt get the exact command for iptables rule in Chain RH-Firewall-1.

Thanks,
Ram-ecare

vishnu_sreekumar · 03-11-2011, 01:17 AM

iptables -A RH-Firewall-1 -i eth0 -p tcp --dport 21 -j DROP

Check the man page of iptables for more details (and make that a habit :P).

rafatmb · 03-11-2011, 07:29 AM

If you are using the connection tracking, you should use:

iptables -A RH-Firewall-1 -p tcp --dport 21 -m state --state NEW,RELATED -j DROP
iptables -A RH-Firewall-1 -p udp --dport 20 -m state --state NEW,RELATED -j DROP

[]'s

Rafa
Linux, Linux and Linux! Suporte Linux

ramecare · 03-11-2011, 10:44 PM

ip table rule for how to block a ftp port for a parthicular ip address in RH-Firewall-1 ?