Fujitsu PRIMEQUEST 1000 Series User Manual page 29

SVmco User Guide
prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source
Chain MMLAN (2 references)
target prot opt source
ACCEPT udp -- 192.168.0.0/24 192.168.0.1
dpts:7000:7100
ACCEPT udp -- 192.168.0.1
spts:7000:7100
ACCEPT udp -- 192.168.0.0/24 192.168.0.1
ACCEPT udp -- 192.168.0.1
ACCEPT udp -- 192.168.1.5
ACCEPT udp -- 192.168.0.1
ACCEPT udp -- 192.168.1.5
ACCEPT udp -- 192.168.0.1
4. Add "MMLAN" to the fifth INPUT chain (before the REJECT setting) and
to the OUTPUT chain. (For details on the iptables option, see the man
manual.)
# /sbin/iptables –I INPUT 5 –j MMLAN
# /sbin/iptables –A OUTPUT –j MMLAN
5. Execute the iptables -L command, and confirm that the MMLAN chains
added to the INPUT and OUTPUT chains are not interrupted by the
previous REJECT, DROP, or other settings.
Example of settings:
# iptables –L
Chain INPUT (policy ACCEPT)
target prot opt source
ACCEPT all -- 0.0.0.0/0
RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0
destination
destination
192.168.0.0/24 udp
192.168.0.0/24 udp spt:162
192.168.0.1
192.168.1.5
192.168.0.1
192.168.1.5
destination
0.0.0.0/0 state
0.0.0.0/0
0.0.0.0/0
0.0.0.0/0 state NEW tcp dpt:22
udp
udp dpt:162
udp dpts:7000:7100
udp spts:7000:7100
udp dpt:162
udp spt:162
21