Sample Header Ad - 728x90

iptables - why the stun, turn ports are not working to allow end points to access the server?

1 vote
1 answer
2190 views
I have this iptables where all working except tcp/udp port 3478 and 5349. $ cat /etc/sysconfig/iptables # Generated by iptables-save v1.4.7 on Thu Nov 21 10:21:41 2013 *filter :FORWARD ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -p tcp -m tcp --dport 3478 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5349 -j ACCEPT -A INPUT -p udp -m udp --dport 5349 -j ACCEPT -A INPUT -p udp -m udp --dport 3478 -j ACCEPT -A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5222 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5269 -j ACCEPT -A INPUT -p udp -m udp -m string --dport 5080 -j DROP --string "friendly-scanner" --algo bm --to 65535 -A INPUT -p udp -m udp -m string --dport 5060 -j DROP --string "friendly-scanner" --algo bm --to 65535 -A INPUT -p tcp -m tcp --dport 5081 -j ACCEPT -A INPUT -p udp -m udp --dport 5081 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5080 -j ACCEPT -A INPUT -p udp -m udp --dport 5080 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT -A INPUT -p udp -m udp --dport 5061 -j ACCEPT -A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT -A INPUT -p udp -m udp --dport 5060 -j ACCEPT -A INPUT -p udp -m udp --dport 16000:42000 -j ACCEPT -A INPUT -p tcp -m tcp --dport 7007 -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A INPUT -s 178.162.205.224/32 -j DROP -A INPUT -s 65.55.44.100/32 -j DROP -A INPUT -s 178.162.205.224/32 -j DROP -A INPUT -s 91.218.247.162/32 -j DROP -A INPUT -s 85.25.78.58/32 -j DROP -A INPUT -s 91.218.247.162/32 -j DROP -A FORWARD -j REJECT --reject-with icmp-host-prohibited -A INPUT -j ACCEPT COMMIT # Completed on Thu Nov 21 10:21:41 2013 # Generated by webmin *mangle :FORWARD ACCEPT [0:0] :INPUT ACCEPT [0:0] :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] COMMIT # Completed # Generated by webmin *nat :OUTPUT ACCEPT [0:0] :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] COMMIT # Completed
Asked by user11085
Nov 25, 2013, 08:59 PM
Last activity: May 28, 2025, 09:03 PM