Hello slapper
1) Don't know this one. If iptables manages all interfaces, the answer is yes.
2) Just change the port numbers or add a new service:
First part of the script:
Code:
allow_proftpd="0"
echo -n "Allow proftpd (y/n)? [y] "
read input
if [ -z "$input" ] || [ "$input" == "y" ] || [ "$input" == "yes" ] || [ "$input" == "Y" ] || [ "$input" == "YES" ] ; then
allow_proftpd="1"
fi
Second part
Code:
#proftpd (1500,1600)
if [ $allow_proftpd -eq "1" ] ; then
iptables -A INPUT -p tcp -m multiport --destination-ports 1500,1600 -j ACCEPT
fi
Bookmarks