software firewall, allow ftps only

robertkwild · 02-14-2017, 08:37 AM

can i write new lines in /etc/sysconfig/iptables -

-A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT

-A INPUT -m state --state NEW -m tcp -p tcp --dport 990 -j ACCEPT

-A INPUT -m state --state NEW -m tcp -p tcp --dport 50000:50100 -j ACCEPT

to only allow ssh (22) ftps (990, 50000:50100) and from my router im only going to allow ftps ports only to my ftp server, NO ssh access

cheers,

rob

michaelk · 02-14-2017, 10:18 AM

Yes however there is the comment in the iptables files...

Quote:

# Firewall configuration written by system-config-firewall
# Manual customization of this file is not recommended.

In addition to the GUI firewall tool you can add the rules manually using the iptables command. If everything works as desired you can save them using the command service iptables save.

robertkwild · 02-15-2017, 06:45 AM

thanks