Re: Iptables: how to open network time servers
Actually, the rule prevents your computer from even asking for NTP stuff in the first place. You have to allow your computer access to external port 123, or if you know the IP address of the NTP server you could allow that IP address. Something like:
Code:
/sbin/iptables -A OUTPUT --dport 123 -j ACCEPT
/sbin/iptables -A OUTPUT -j REJECT
You might find you need to also allow traffic to/from the local interface:
Code:
/sbin/iptables -A OUTPUT -o lo -j ACCEPT
/sbin/iptables -A OUTPUT --dport 123 -j ACCEPT
/sbin/iptables -A OUTPUT -j REJECT
Without the bigger context of what you are trying to do, it is hard to comment further.
Any follow-up information on your issue would be appreciated. Please have the courtesy to report back.
Bookmarks