Untitled

public text v1 · immutable

#230644

·published 2006-10-31 11:04 UTC


iptables -A INPUT -p tcp -i  $WAN_INTERFACE --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT 
 iptables -A OUTPUT -p tcp -o $WAN_INTERFACE --sport 21 -m state --state ESTABLISHED -j ACCEPT 
 
 iptables -A INPUT -p tcp -i $WAN_INTERFACE --dport 20 -m state --state RELATED,ESTABLISHED -j ACCEPT 
 iptables -A OUTPUT -p tcp -o $WAN_INTERFACE --sport 20 -m state --state RELATED,ESTABLISHED -j ACCEPT 
 
 iptables -A INPUT -p tcp -i $WAN_INTERFACE --sport 1024:65000 --dport 1024:65000 -m state --state RELATED,ESTABLISHED -j ACCEPT 
 iptables -A OUTPUT -p tcp -o $WAN_INTERFACE --sport 1024:65000 --dport 1024:65000 -m state --state RELATED,ESTABLISHED -j ACCEPT