IPTABLES and RELATED states

From: Andrew Townsend (apstownsend_at_gmail.com)
Date: 07/26/05 

Date: 26 Jul 2005 08:17:46 -0700

Hi,

Is it possible to accept a connection to a new port if another
connection from the same orginating IP has been accepted to a different
port. For example;

iptables -A FORWARD -i eth0 -p tcp --dport 443 -j ACCEPT
iptables -A FORWARD -i eth0 -p tcp --dport 3389 -m --state
ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD DROP

The client connects to HTTPS (tsweb), since the client now has an
active HTTPS link to the firewall it now allows the same client through
port 3389.

Now this doesn't work just hoped it might give you an idea of what I am
trying to do, personally I dont think it's possible!

Thanks
Andrew

Relevant Pages

  • Re: interfaces lo:1 lo:2 lo:3? (for remote ssh tunnels)
    ... That's the problem tunneling (port forwarding) solves. ... >>can't get past the client firewall. ... > I don't understand why the server would be making the ... server initiates another connection to the client -- in this ...
    (Debian-User)
  • Re: Using Remote Desktop From an SBS Domain
    ... when you tried to RDP while attached directly to a port on your router? ... So if 3389 needs forwarded on the client end too then that is what the ... Hopefully next week I can attempt a connection while my ISP watches the ...
    (microsoft.public.windows.server.sbs)
  • RE: Telnet/ftp problems SBS2000
    ... Please make sure your client computers are configured as both Firewall ... will find two options "Enable folder view for FTP sites" and "Use Passive ... that the control connection has been successfully established, ... (other than port 21) ...
    (microsoft.public.windows.server.sbs)
  • Re: One workstation cant access email from ISP - CROSSPOST
    ... Remove or disable the ISA Firewall client. ... Ethernet adapter Wireless Network Connection: ... Switch is nothing more than a patch panel; ... port - same result. ...
    (microsoft.public.exchange.admin)
  • Re: Processs PreciseMail AntiSpam Gateway - any experience so far ?
    ... >> another machine or port on the user's home network. ... >> connection to an external machine having been made or by the user explicitly ... > use a well-known port that the NAT firewall forwards to the client ...
    (comp.os.vms)