Linux configuration firewall, open access port

Vi/etc/sysconfig/iptables

such as:-a input-m state–state new-m tcp-p tcp–dport 139-j ACCEPT (allow 139 ports through the firewall)
-A input-m state–state new-m tcp-p tcp–dport 445-j ACCEPT (allow 445 ports through the firewall)
Special note: Adding rules to the last line of the firewall configuration will cause the firewall to fail to start.

The port number of the remaining services can be modified to go
After the correct addition, the firewall rules are as follows:

######################################
# Firewall configuration written by System-config-firewall
# Manual Customization of this file are not recommended.
*filter
: INPUT ACCEPT [0:0]
: FORWARD ACCEPT [0:0]
: OUTPUT ACCEPT [0:0]
-A input-m state–state established,related-j ACCEPT
-A input-p icmp-j ACCEPT
-A input-i lo-j ACCEPT

-A input-m state–state new-m tcp-p tcp–dport 22-j ACCEPT

-A input-m state–state new-m tcp-p tcp–dport 23-j ACCEPT

-A input-m state–state new-m tcp-p tcp–dport 25-j ACCEPT

-A input-m state–state new-m tcp-p tcp–dport 80-j ACCEPT
-A input-m state–state new-m tcp-p tcp–dport 139-j ACCEPT
-A input-m state–state new-m tcp-p tcp–dport 445-j ACCEPT

-A input-m state–state new-m tcp-p tcp–dport 1723-j ACCEPT
-A input-m udp-p udp–dport 137-j ACCEPT

-A input-m udp-p udp–dport 138-j ACCEPT
-A input-j Reject–reject-with icmp-host-prohibited
-A forward-j Reject–reject-with icmp-host-prohibited
COMMIT
#####################################

/etc/init.d/iptables Restart #最后重启防火墙使配置生效

This article is from the "Steven Never give Up" blog, please be sure to keep this source http://wsw26.blog.51cto.com/1442148/1716481

Linux configuration firewall, open access port