View source for Network Ports ← Network Ports

'''This instruction is intended for administrators of BrandMeister DMR Servers'''

I am using the following set of ports for incoming connections. For your convenience, there is a set of iptables rules provided below.
== Ports used by BrandMeister ==
* TCP/80 
** Webserver with status pages and HTTP API
* UDP/30001 
** D-STAR D-Extra reflector client
* UDP/30051,30062
** D-STAR DCS reflector client
* TCP/5200 
** Echolink client
* UDP/5198:5199
** Echolink
* UDP/50000:50002 
** [[Hytera/Multi-Site Connect|Hytera Multi-Site Connect]]
* UDP/55000
** [[Motorola/IP Site Connect|Motorola IP Site Connect]]
* UDP/62030
** [[Homebrew repeater protocol|Homebrew repeater protocol (Generic)]]
* UDP/62031
** [[Homebrew repeater protocol|Homebrew repeater protocol (MMDVMHost)]]
* UDP/54003
** Tellus Agent
* UDP/54004
** Radioactivity
* UDP/54000
* TCP/54000
** [[FastForward network protocol]]
* UDP/62010
** DMR+ s-master
* UDP/55001
** IPSC for external networks connection (such as SmartPTT)
* UDP/42420:42422
** c-Bridge CC-CC link connections
* UDP/10002
** XLX Interlink
* TCP/50180
* UDP/50178:50200
** Hytera RoIP (PDC760)
* UDP/54006
** Open DMR Terminal RoIP (Boxchip S900A and others)

== iptables ==
<pre>

iptables  -P INPUT ACCEPT
ip6tables -P INPUT ACCEPT

iptables  -P OUTPUT ACCEPT
ip6tables -P OUTPUT ACCEPT

iptables  -F; iptables  -X
ip6tables -F; ip6tables -X

iptables  -A INPUT -i lo -j ACCEPT
ip6tables -A INPUT -i lo -j ACCEPT

iptables  -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP MQTT"
ip6tables -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP MQTT"
iptables  -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP TNT"
ip6tables -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP TNT"
iptables  -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP SAP"
ip6tables -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP SAP"

iptables  -t raw -F; iptables  -t raw -X
ip6tables -t raw -F; ip6tables -t raw -X

iptables  -t raw -A OUTPUT -j CT --notrack
ip6tables -t raw -A OUTPUT -j CT --notrack

</pre>