Iptables not adding rules - DNSonly

Planky

• January 19, 2015 18:18

Have a Centos 5.10 server running DNSonly. I want to change the SSH port to a different number, and update the firewall rules accordingly - however they are not being added
root@ns3 [~]# sudo iptables -A INPUT -p tcp --dport 4535 -j ACCEPT root@ns3 [~]# sudo iptables -A OUTPUT -p tcp --sport 4535 -j ACCEPT
No errors are given. However listing the currently active rules does not show the above.
Chain INPUT (policy ACCEPT) target prot opt source destination cP-Firewall-1-INPUT all -- anywhere anywhere acctboth all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp dpt:soap-http ACCEPT tcp -- anywhere anywhere tcp dpt:soap-http ACCEPT tcp -- anywhere anywhere tcp dpt:soap-http ACCEPT tcp -- anywhere anywhere tcp dpt:soap-http Chain FORWARD (policy ACCEPT) target prot opt source destination cP-Firewall-1-INPUT all -- anywhere anywhere Chain OUTPUT (policy ACCEPT) target prot opt source destination acctboth all -- anywhere anywhere ACCEPT tcp -- anywhere anywhere tcp spt:soap-http ACCEPT tcp -- anywhere anywhere tcp spt:soap-http ACCEPT tcp -- anywhere anywhere tcp spt:soap-http ACCEPT tcp -- anywhere anywhere tcp spt:soap-http Chain acctboth (2 references) target prot opt source destination tcp -- ns3.domainname.com anywhere tcp dpt:http tcp -- anywhere ns3.domainname.com tcp spt:http tcp -- ns3.domainname.com anywhere tcp dpt:smtp tcp -- anywhere ns3.domainname.com tcp spt:smtp tcp -- ns3.domainname.com anywhere tcp dpt:pop3 tcp -- anywhere ns3.domainname.com tcp spt:pop3 icmp -- ns3.domainname.com anywhere icmp -- anywhere ns3.domainname.com tcp -- ns3.domainname.com anywhere tcp -- anywhere ns3.domainname.com udp -- ns3.domainname.com anywhere udp -- anywhere ns3.domainname.com all -- ns3.domainname.com anywhere all -- anywhere ns3.domainname.com all -- anywhere anywhere Chain cP-Firewall-1-INPUT (2 references) target prot opt source destination ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:imaps ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:tpcsrvr ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:domain ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ftp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:infowave ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:https ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:tsrmagt ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:http ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:26 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:webcache ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:imap ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:ssh ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pop3s ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:pop3 ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:smtp ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:gnunet ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:eli ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:nbx-ser ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:urd ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:nbx-dir ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:mysql ACCEPT tcp -- anywhere anywhere state NEW tcp dpt:radsec ACCEPT udp -- anywhere anywhere state NEW udp dpt:domain

• 

  cPanelMichael

  • January 20, 2015 13:59

  Hello :) I suggest installing a third-party firewall management utility such as CSF to help manage your firewall rules: [url=http://configserver.com/cp/csf.html]ConfigServer Security & Firewall Thank you.

  0
• 

  Planky

  • January 20, 2015 23:41

  Done, is working now thank you

  0
• 

  cPanelMichael

  • January 21, 2015 14:54

  I am happy to see that resolved the issue. Thank you for updating us with the outcome.

  0

Please sign in to leave a comment.