The relevant firewall rules on the server

relevant_firewall.txt (text/plain), 1.71 KB, created by Aurélien Guillaume on 2008-06-10 13:20:52 UTC

# Generated by iptables-save v1.3.8 on Tue Jun 10 15:14:59 2008
*raw
:PREROUTING ACCEPT [3398928718:700603894730]
:OUTPUT ACCEPT [3972232106:3058451855577]
COMMIT
# Completed on Tue Jun 10 15:14:59 2008
# Generated by iptables-save v1.3.8 on Tue Jun 10 15:14:59 2008
*nat
:PREROUTING ACCEPT [356828706:18138588337]
:POSTROUTING ACCEPT [14964934:924962008]
:OUTPUT ACCEPT [35818488:2246016382]
-A PREROUTING -d SERVER_IP -p tcp -m tcp --dport 60000 -j DNAT --to-destination SERVER_IP:21 
-A PREROUTING -d SERVER_IP -p tcp -m tcp --dport 60001 -j DNAT --to-destination SERVER_IP:21 
-A PREROUTING -d SERVER_IP -p tcp -m tcp --dport 60002 -j DNAT --to-destination SERVER_IP:21 
-A POSTROUTING -o eth0 -m comment --comment "Masquerade our VPNs" -j MASQUERADE 
COMMIT
# Completed on Tue Jun 10 15:14:59 2008
# Generated by iptables-save v1.3.8 on Tue Jun 10 15:14:59 2008
*mangle
:PREROUTING ACCEPT [3398928714:700603894814]
:INPUT ACCEPT [3395599317:698804259703]
:FORWARD ACCEPT [2197837:1579579311]
:OUTPUT ACCEPT [3972231995:3058451850665]
:POSTROUTING ACCEPT [3973651956:3059986401633]
COMMIT
# Completed on Tue Jun 10 15:14:59 2008
# Generated by iptables-save v1.3.8 on Tue Jun 10 15:14:59 2008
*filter
:INPUT DROP [2167853:290169284]
:FORWARD DROP [101:8708]
:OUTPUT ACCEPT [184939201:126987049809]
-A INPUT -i lo -m comment --comment "Local ok" -j ACCEPT 
-A INPUT -p udp -m udp --dport 5060 -j ACCEPT 
-A INPUT -m state --state RELATED,ESTABLISHED -m comment --comment "Etabli et lie OK" -j ACCEPT 
-A INPUT -p icmp -j ACCEPT 
-A INPUT -p tcp -m tcp --dport 22 -m comment --comment "SSH ok" -j ACCEPT 
-A FORWARD -m state --state RELATED,ESTABLISHED -m comment --comment "Related ok" -j ACCEPT 
COMMIT
# Completed on Tue Jun 10 15:14:59 2008