Iptables connection tracking

Connection tracking is an essential security feature of Iptables. But, what is connection tracking?

It is the ability to maintain connection information in memory. This is new feature added in 2.4.xx Linux kernel. Eariler only commercial firewall has this feature but now it is part of Linux. It can remember connection states such as established & new connections along with protocol types, source and destination ip address. You can allow or deny access based upon state. Following are the states:

Configure iptables ftp port 21 and 22 including passive ports

How do I open port 21 using Linux iptables firewall?

Use iptables administration tool for IPv4 packet filtering and NAT under Linux to open tcp port 21 (FTP). Following rule-set assumes that your eth0 network interface is directly connected to the Internet. It has public ip (202.54.1.20). FTP use both port 21 and 20 (port 21 for the command port and port 20 for the data). So following iptables rules take care of both ports (add rules to your iptables based shell script):

No Comments
Dec, 14, 2010
Angelo Schalley
html / php, IIS, Plesk Windows, security, Windows-Microsoft

1. Create the user:
Administrative Tools -> Computer Management
Expand Local Users and Groups
Right-click Users, select New User…
Fill in the appropriate fields, be sure to clear the box for “User must change password at next logon”.
Click Create

Category Archives: security

Iptables connection tracking

Configure iptables ftp port 21 and 22 including passive ports

Password protect a directory within IIS

Categories