nixCraft Poll

Your Favorite Open Source CMS
- Joomla (26%, 544 Votes)
- Drupal (24%, 502 Votes)
- WordPress (15%, 314 Votes)
- Other (12%, 258 Votes)
- MediaWiki (6%, 117 Votes)
- Plone (5%, 106 Votes)
- PHP-Nuke (5%, 97 Votes)
- Typo (4%, 80 Votes)
- Mambo (3%, 54 Votes)
- eZ Publish (1%, 25 Votes)
Total Voters: 2,097
Loading ...

Polls Archive

nixCraft welcomes readers' articles and guest blogging posts. We're interested in articles on programming, security, database, Linux and anything else related to technology.

Topics

Linux Iptables allow LDAP server incoming client request

Posted by Vivek Gite [Last updated: August 3, 2005]

LDAP (Lightweight Directory Access Protocol) powerful enterprise class directory service by default listen on UDP port 389 for queries. Following iptable rules allows incoming client request (open port UDP port 389) for server IP address 202.54.1.20 :
iptables -A INPUT -p udp -s 0/0 --sport 1024:65535 -d 202.54.1.20 --dport 389 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p udp -s 202.54.1.20 --sport 389 -d 0/0 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT

Restrict access to LDAP database server from your network is essential, following iptables allows incoming LDAP client request from IP address 202.54.1.0/24 network only:
iptables -A INPUT -p udp -s 202.54.1.0/24 --sport 1024:65535 -d 202.54.1.20 --dport 389 -m state --state NEW,ESTABLISHED -j ACCEPT

iptables -A OUTPUT -p udp -s 202.54.1.20 --sport 389 -d 202.54.1.0/24 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT

Want to stay up to date with the latest Linux tips, news and announcements? Subscribe to our free e-mail newsletter or RSS feed to get all updates. You can Email this page to a friend.