Hello,
just some tips for people who run live server on how protect ur server with iptables
first you need to be sure you did enable iptables on ur linux
then do those step
First : Flush your iptables (mean you gonna reset all rules to default)
Note that i still have iptables running when i'm doing these query
Second Step add rules to match your server (here we add rules for Run Swordsman)
you need add your IP for allow you only to access certain port
note that i did open mysql to external but i do lock them from phpmyadmin in case you are running your web from an other machine as i do
in that rules i did enable basic rules for Mail service and dns lookup (port 53) in case you add rules with domain name
Note those lines:
iptables -A INPUT -p tcp -s YOURCOMPUTERIP -m tcp --dport 9000 -j ACCEPT
iptables -A INPUT -p tcp -s YOURCOMPUTERIP -m tcp --dport 22 -j ACCEPT
Where Gameserver port = 9000 > that will allow you edit your GameDBServer ip as 0.0.0.0 and open it for enable mail soft shared on that forum :) so you don't need enable debug mode for add item on live server anymore :)
Third when these rules is added via console (u can copy past all at once into the console)then save and restart iptable
that it :)
hope it's help
just some tips for people who run live server on how protect ur server with iptables
first you need to be sure you did enable iptables on ur linux
then do those step
First : Flush your iptables (mean you gonna reset all rules to default)
Code:
service iptables stop
iptables -F
iptables -L -n
iptables-save | sudo tee /etc/sysconfig/iptables
service iptables restartSecond Step add rules to match your server (here we add rules for Run Swordsman)
Code:
iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 465 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 110 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 995 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 143 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 993 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 9223 -j ACCEPT
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -A INPUT -p tcp --dport 53 -j ACCEPT
iptables -A INPUT -p tcp -s YOURCOMPUTERIP -m tcp --dport 9000 -j ACCEPT
iptables -A INPUT -p tcp -s YOURCOMPUTERIP -m tcp --dport 22 -j ACCEPT
iptables -I INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P INPUT DROPnote that i did open mysql to external but i do lock them from phpmyadmin in case you are running your web from an other machine as i do
in that rules i did enable basic rules for Mail service and dns lookup (port 53) in case you add rules with domain name
Note those lines:
iptables -A INPUT -p tcp -s YOURCOMPUTERIP -m tcp --dport 9000 -j ACCEPT
iptables -A INPUT -p tcp -s YOURCOMPUTERIP -m tcp --dport 22 -j ACCEPT
Where Gameserver port = 9000 > that will allow you edit your GameDBServer ip as 0.0.0.0 and open it for enable mail soft shared on that forum :) so you don't need enable debug mode for add item on live server anymore :)
Code:
[GameDBServer]
zoneid=1
aid=23
type = tcp
port = 9000
address = 0.0.0.0Code:
iptables -L -n
iptables-save | sudo tee /etc/sysconfig/iptables
service iptables restarthope it's help