Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

4
  • So my only option would be whitelisting certain input ports for output? Is that possible? I'm thinking allow request on INPUT to x.x.x.x:8080 go OUTPUT. ie: --append OUTPUT --jump ALLOW --destination x.x.x.x ... Commented Mar 17, 2020 at 23:54
  • I didn't check the syntax, but this is correct. Just as i told, your requirement can't be met. If there is some possibility to run a script on incoming packets, you could change the rules. But last time i've been working on firewall rules, this wasn't possible. Commented Mar 18, 2020 at 1:30
  • This is correct. Based on your example you intend to allow incoming connections from some IP. However, they can't be RELATD/ESTABLISHED as you've prohibited starting connections from this server. Therefore, your state should be set to 'NEW'. Commented Mar 18, 2020 at 16:37
  • But this wouldnt block anything, would it. There was a misunderstanding, how it works. Commented Mar 18, 2020 at 16:39