Displaying 1 result from an estimated 1 matches for "fwport".
2007 Mar 17
2
This firewall rule will self-destruct
...les active:
# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# iptables -t nat -A POSTROUTING -j MASQUERADE
2) Server hosts a special PHP script, that when called correctly, sets rules like
# iptables -I PREROUTING -p tcp -s $REMOTE --dport 80 -j DNAT --to-destination $FWIP:$FWPORT
# iptables -I FORWARD -p tcp -s $REMOTE --dport 80 -j ACCEPT
The *next* tcp connection from their computer to the webserver will get NAT'd to service $FWIP:$FWPORT.
But I want this rule cleared out as soon as the connection is made with the latter altered rules. Is there a way to write a ru...