[CentOS] Re: TFP inside firewall
Filipe Brandenburger
filbranden at gmail.com
Wed Jun 11 01:30:22 UTC 2008
If conntrack can track the TFTP sessions, then you should be able to
filter it using -m state in iptables.
iptables -A ... -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A ... -m state --state NEW -p udp --dport 69 -j ACCEPT
You can have one rule in INPUT and the other in OUTPUT, or both in
FORWARD with different -i and -o interfaces.
If you give more details on your current topology, what's the access
you want to allow, and what are your current rules, it might be easier
to help you accomplish that exactly.
HTH,
Filipe
More information about the CentOS
mailing list