ispCP - Board - Support
Iptables Rules? - Printable Version

+- ispCP - Board - Support (http://www.isp-control.net/forum)
+-- Forum: ispCP Omega Support Area (/forum-30.html)
+--- Forum: System Setup & Installation (/forum-32.html)
+--- Thread: Iptables Rules? (/thread-5707.html)

Iptables Rules? - ciccio - 02-13-2009 10:15 PM

Hi,
someone knows tell me what is the path of the configuration file with the iptables rules?

thanks in advance Rolleyes

RE: Iptables Rules? - BeNe - 02-13-2009 10:23 PM

You mean "ispcp_network" ?
This is in Debian under /etc/init.d/ispcp_network

Greez BeNe

RE: Iptables Rules? - ciccio - 02-14-2009 12:15 AM

I tried to add on ispcp_network the door what want to open but doesn' t work..
[/b]
${IPTABLES} -I ISPCP_INPUT -p tcp --dport 8090 2>> "$LOGFILE"
${IPTABLES} -I ISPCP_OUTPUT -p tcp --sport 8090 2>> "$LOGFILE"

(02-13-2009 10:23 PM)BeNe Wrote:  You mean "ispcp_network" ?
This is in Debian under /etc/init.d/ispcp_network

Greez BeNe
if launch nmap localhost port 8090 does not see, but if it launch nmap -p8090 says open..
But it does not work Sad

RE: Iptables Rules? - BeNe - 02-14-2009 12:32 AM

Best would be if you write an own Shell Script that runs during the Boot.
Is more simple and should work. Next is that there will be no problem in the future when you upgrades ispCP..

Greez BeNe

RE: Iptables Rules? - ciccio - 02-14-2009 01:21 AM

Can I not use ispcp_network and use only my iptables script?

things can go wrong?
I do not think so ..

RE: Iptables Rules? - BeNe - 02-14-2009 02:08 AM

Of course, this should work to add it to the ispCP Script.
But i do it on most projects by an own Script, because of updates and such things.

Quote:if launch nmap localhost port 8090 does not see, but if it launch nmap -p8090 says open..
Please post the Output of:
Code:
# iptables -nvL

Greez BeNe

RE: Iptables Rules? - ciccio - 02-14-2009 02:29 AM

I created an init.d script with the rules that I need like this:
/sbin/iptables -I INPUT -p tcp --dport 8090 -j ACCEPT

now everything seems to work ..

if I want to eliminate rules of ispcp anduse my script only, as I do?
I erased from runlevel at boot ispcp_network but are charged the same to its rules, however I do not understand from where..

(02-14-2009 02:08 AM)BeNe Wrote:  Of course, this should work to add it to the ispCP Script.
But i do it on most projects by an own Script, because of updates and such things.

Quote:if launch nmap localhost port 8090 does not see, but if it launch nmap -p8090 says open..
Please post the Output of:
Code:
# iptables -nvL

Greez BeNe