Pario TechnoBlob » Linux http://pario.no A cronological documentation test project, nothing serious, really! Thu, 02 Feb 2012 13:17:58 +0000 en hourly 1 http://wordpress.org/?v=3.3.1 Some iptables tricks http://pario.no/2008/05/27/some-iptables-tricks/ http://pario.no/2008/05/27/some-iptables-tricks/#comments Tue, 27 May 2008 22:17:31 +0000 Hans-Henry Jakobsen http://pario.no/?p=457 Multiport

The Multiport extension allows you to specify multiple ports and ranges and makes it possible to create complex rules in one line. Here’s an example of how you can allow SSH, Web, IMAP and X terminal traffic 

iptables -A INPUT -p tcp -m multiport --dports 22,80,143,6000:6003 -j ACCEPT

The alternative to using this rule would be

iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 143 -j ACCEPT
iptables -A INPUT -p tcp --dport 6000:6003 -j ACCEPT

The multiport directive saves you a lot of lines to maintain and requires less system processing.

]]> http://pario.no/2008/05/27/some-iptables-tricks/feed/ 0