On Tue, 2006-04-11 at 23:27 -0600, Wade Preston Shearer wrote:
> The command that I tried to use to open the port is:
> 
> /sbin/iptables -A INPUT -p tcp --syn --destination-port <new port -j  
> ACCEPT
> /sbin/iptables -A INPUT -p tcp --syn -j DROP

Has a similar command worked for you in the past? While it is impossible
to be sure without knowing more about your firewall, I'm fairly certain
that is not what you want. You'll probably have more luck with something
like:

-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A INPUT -m state --state NEW -m tcp -p tcp --dport <new port> -j ACCEPT
-A INPUT -p tcp -j DROP

-- 
Stuart Jansen              e-mail/jabber: [EMAIL PROTECTED]
                           google talk:   [EMAIL PROTECTED]

"However beautiful the strategy, you should occasionally look at 
the results." -- Winston Churchill

Attachment: signature.asc
Description: This is a digitally signed message part

/*
PLUG: http://plug.org, #utah on irc.freenode.net
Unsubscribe: http://plug.org/mailman/options/plug
Don't fear the penguin.
*/

Reply via email to