Difference between revisions of "Network Ports"

    (→‎iptables)
     
    (→‎Ports used by BrandMeister)
     
    (4 intermediate revisions by the same user not shown)
    Line 4: Line 4:
     
    == Ports used by BrandMeister ==
    		 
    == Ports used by BrandMeister ==
     
    * TCP/80  
    		 
    * TCP/80  
     +
    * TCP/8080
     
    ** Webserver with status pages and HTTP API
    		 
    ** Webserver with status pages and HTTP API
     
    * UDP/30001  
    		 
    * UDP/30001  
    Line 25: Line 26:
     
    * UDP/54004
    		 
    * UDP/54004
     
    ** Radioactivity
    		 
    ** Radioactivity
    −
    * UDP/8880
    		 
    −
    ** [[DV4mini]]
    		 
     
    * UDP/54000
    		 
    * UDP/54000
     
    * TCP/54000
    		 
    * TCP/54000
     
    ** [[FastForward network protocol]]
    		 
    ** [[FastForward network protocol]]
    −
    * UDP/62010
    		 
    −
    ** DMR+ s-master
    		 
     
    * UDP/55001
    		 
    * UDP/55001
     
    ** IPSC for external networks connection (such as SmartPTT)
    		 
    ** IPSC for external networks connection (such as SmartPTT)
    Line 58: Line 55:
     
    iptables  -A INPUT -i lo -j ACCEPT
    		 
    iptables  -A INPUT -i lo -j ACCEPT
     
    ip6tables -A INPUT -i lo -j ACCEPT
    		 
    ip6tables -A INPUT -i lo -j ACCEPT
    −
    		 
    −
    iptables  -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP MQTT"
    		 
    −
    ip6tables -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP MQTT"
    		 
    −
    iptables  -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP TNT"
    		 
    −
    ip6tables -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP TNT"
    		 
    −
    iptables  -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP SAP"
    		 
    −
    ip6tables -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP SAP"
    		 
      
     
    iptables  -t raw -F; iptables  -t raw -X
    		 
    iptables  -t raw -F; iptables  -t raw -X
    Line 71: Line 61:
     
    iptables  -t raw -A OUTPUT -j CT --notrack
    		 
    iptables  -t raw -A OUTPUT -j CT --notrack
     
    ip6tables -t raw -A OUTPUT -j CT --notrack
    		 
    ip6tables -t raw -A OUTPUT -j CT --notrack
     +
     +
    iptables  -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP mqtt"
     +
    ip6tables -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP mqtt"
     +
    iptables  -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP sap"
     +
    ip6tables -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP sap"
      
     
    </pre>
    		 
    </pre>

    Latest revision as of 19:57, 6 April 2021

    This instruction is intended for administrators of BrandMeister DMR Servers

    I am using the following set of ports for incoming connections. For your convenience, there is a set of iptables rules provided below.

    Ports used by BrandMeister

    iptables

    1.  
    2. iptables  -P INPUT ACCEPT
    3. ip6tables -P INPUT ACCEPT
    4.  
    5. iptables  -P OUTPUT ACCEPT
    6. ip6tables -P OUTPUT ACCEPT
    7.  
    8. iptables  -F; iptables  -X
    9. ip6tables -F; ip6tables -X
    10.  
    11. iptables  -A INPUT -i lo -j ACCEPT
    12. ip6tables -A INPUT -i lo -j ACCEPT
    13.  
    14. iptables  -t raw -F; iptables  -t raw -X
    15. ip6tables -t raw -F; ip6tables -t raw -X
    16.  
    17. iptables  -t raw -A OUTPUT -j CT --notrack
    18. ip6tables -t raw -A OUTPUT -j CT --notrack
    19.  
    20. iptables  -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP mqtt"
    21. ip6tables -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP mqtt"
    22. iptables  -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP sap"
    23. ip6tables -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP sap"
    24.  
    Retrieved from "https://wiki.brandmeister.network/index.php?title=Network_Ports&oldid=16588"

    This instruction is intended for administrators of BrandMeister DMR Servers

    I am using the following set of ports for incoming connections. For your convenience, there is a set of iptables rules provided below.

    Ports used by BrandMeister[edit]

    iptables[edit]

    1.  
    2. iptables  -P INPUT ACCEPT
    3. ip6tables -P INPUT ACCEPT
    4.  
    5. iptables  -P OUTPUT ACCEPT
    6. ip6tables -P OUTPUT ACCEPT
    7.  
    8. iptables  -F; iptables  -X
    9. ip6tables -F; ip6tables -X
    10.  
    11. iptables  -A INPUT -i lo -j ACCEPT
    12. ip6tables -A INPUT -i lo -j ACCEPT
    13.  
    14. iptables  -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP MQTT"
    15. ip6tables -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP MQTT"
    16. iptables  -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP TNT"
    17. ip6tables -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP TNT"
    18. iptables  -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP SAP"
    19. ip6tables -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP SAP"
    20.  
    21. iptables  -t raw -F; iptables  -t raw -X
    22. ip6tables -t raw -F; ip6tables -t raw -X
    23.  
    24. iptables  -t raw -A OUTPUT -j CT --notrack
    25. ip6tables -t raw -A OUTPUT -j CT --notrack
    26.