iptables -A INPUT -m state --state NEW -p tcp --dport 9102 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp --dport 9101:9103 -j ACCEPT
iptables -A OUTPUT -m state --state NEW -p tcp --dport 9101 -j ACCEPT
iptables -A OUTPUT -m state --state NEW -p tcp --dport 9103 -j ACCEPT
iptables -A OUTPUT -m state --state NEW -p tcp --dport 9102:9103 -j ACCEPT
# iptables -L -v
Chain INPUT (policy DROP 3657 packets, 417K bytes)
pkts bytes target prot opt in out source destination
54 2860 ACCEPT all -- any any localhost.localdomain anywhere
0 0 ACCEPT icmp -- any any anywhere anywhere icmp echo-request
22069 1471K ACCEPT tcp -- any any anywhere anywhere tcp dpt:ssh
192K 34M ACCEPT udp -- any any anywhere anywhere udp dpt:1191
6 360 ACCEPT all -- tun+ any anywhere anywhere
0 0 ACCEPT all -- tap+ any anywhere anywhere
828K 84M ACCEPT all -- eth1 any anywhere anywhere
1376K 1865M ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:bacula-fd
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpts:bacula-dir:bacula-sd
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 DROP all -- eth1 any !192.168.3.0/24 anywhere
166K 21M ACCEPT all -- tun+ any anywhere anywhere
0 0 ACCEPT all -- tap+ any anywhere anywhere
98084 48M ACCEPT all -- eth0 any anywhere anywhere
290K 33M ACCEPT all -- eth1 any anywhere anywhere
0 0 ACCEPT all -- any eth0 anywhere anywhere state NEW
0 0 ACCEPT all -- any any anywhere anywhere state RELATED,ESTABLISHED
Chain OUTPUT (policy ACCEPT 2895K packets, 2012M bytes)
pkts bytes target prot opt in out source destination
19820 1372K ACCEPT all -- any eth0 anywhere anywhere state NEW
1 60 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:bacula-dir
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpt:bacula-sd
0 0 ACCEPT tcp -- any any anywhere anywhere state NEW tcp dpts:bacula-fd:bacula-sd