block all ports but let rapidleech working

[vincentfkc]

I want to block all my VPS Ports cept

www/ssh/ftp

sudo iptables -A INPUT -p tcp --dport www -j ACCEPT
 sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT
 sudo iptables -A INPUT -p tcp --dport ftp -j ACCEPT
 sudo iptables -A INPUT -j DROP

the above code worked but they also blocked all incoming traffice so that rapidleech cant download from filehost/other web sever

anyone could help

regards

vincentfkc Reviewed by vincentfkc on 13th Jan 2012. block all ports but let rapidleech working I want to block all my VPS Ports cept www/ssh/ftp sudo iptables -A INPUT -p tcp --dport www -j ACCEPT sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT sudo iptables -A INPUT -p tcp --dport ftp -j ACCEPT sudo iptables -A INPUT -j DROP Rating: 5

[Bharat]

I want to block all my VPS Ports cept

www/ssh/ftp

sudo iptables -A INPUT -p tcp --dport www -j ACCEPT
sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT
sudo iptables -A INPUT -p tcp --dport ftp -j ACCEPT
sudo iptables -A INPUT -j DROP

the above code worked but they also blocked all incoming traffice so that rapidleech cant download from filehost/other web sever

anyone could help

regards

Try this , it should work

sudo iptables -A INPUT -p tcp --dport www -j ACCEPT
sudo iptables -A OUTPUT -p tcp --sport www -j ACCEPT
sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT
sudo iptables -A OUTPUT -p tcp --sport ssh -j ACCEPT
sudo iptables -A INPUT -p tcp --dport ftp -j ACCEPT
sudo iptables -A OUTPUT -p tcp --sport ftp -j ACCEPT
sudo iptables -A INPUT -j DROP

[vincentfkc]

thanx
but not working , same error

[Bharat]

Did you restarted iptables ?

Service restart iptable

[vincentfkc]

I am using ubuntu, there is no service iptables

But I am sure I restart (the whole server)

[Bharat]

Check this out > https://help.ubuntu.com/community/IptablesHowTo , hope it can help in anyway .

[vincentfkc]

I think

sudo iptables -A OUTPUT -p tcp --sport www -j ACCEPT

shoule be

sudo iptables -A OUTPUT -p tcp --dport www -j ACCEPT

[vincentfkc]

not work