WebTo make sure that all connections from or to an IP address are accepted, change -A to -I which inserts the rule at the top of the list: iptables -I INPUT -p tcp -s XXX.XXX.XXX.XXX -j ACCEPT iptables -I OUTPUT -p tcp -d XXX.XXX.XXX.XXX -j ACCEPT` Share Improve this answer Follow edited Apr 28, 2015 at 13:36 answered Apr 24, 2015 at 14:18 devhallo WebAug 26, 2015 · You could allow SSH for a specific IP by using a rule like: iptables -A INPUT -m state --state NEW,ESTABLISHED,RELATED --source x.x.x.x -p tcp --dport 22 -j ACCEPT iptables -A INPUT -m state --state NEW,ESTABLISHED,RELATED -p tcp --dport 22 -j DROP If you want to use iptables you should have a look at this stackoverflow question. Share
Setting up a Linux firewall with iptables - Addictive Tips Guide
Web2 Answers. Sorted by: 30. To allow outgoing connections from server1 to server2 on TCP port 2194, use this on server1: iptables -A OUTPUT -p tcp -d --dport 2194 -j ACCEPT. To allow incoming connections from server1 to server2 on TCP port 2194, use this on server2: iptables -A INPUT -p tcp -s --dport 2194 -j ACCEPT. WebThe answer is probably yes -- If your iptables rules are active the destination port SSH ( dpt:ssh) rule only covers port 22 -- the standard SSH port as assigned by IANA & listed in /etc/services. newyork-presbyterian ambulatory care network
Changed SSH port, do I need to open the port using iptables?
Web1 Answer. -A INPUT -p tcp --dport 2024 -m state --state NEW -m recent --set --name SSH -A INPUT -p tcp --dport 2024 -m state --state NEW -m recent --update --seconds 120 --hitcount 8 --rttl --name SSH -j DROP. Also, you should think about a cron task that will clean your /proc/net/ipt_recent/SSH (ipt_recent may be xt_recent on newer platforms ... WebThe last two commands allow loopback traffic as this is required by some applications to function correctly. You can restrict the SSH access from specific IP using -s source_ip … WebIPTables Allow SSH on any Interface Below command will enable SSH port in all the interface. # iptables -A INPUT -p tcp –dport 22 -j ACCEPT IPTables Allow SSH on specific … new york presbyterian ambulance