Hello guys,
I've searched and tried everything on here and elsewhere, but it still doesn't work...
I have a dedicated server on which Plex is installed. I use the app.plex.tv/web/app to connect to the server from home.
When iptables rules are empty, everything works fine. If I apply my rules, the server cant be seen from the app.plex.tv/web/app
Here are my rules
#Default policy: drop everything
-P INPUT DROP
-P FORWARD DROP
-P OUTPUT DROP
#Allowing SSH (XX being my SSH port)
-A INPUT -i eth0 -p tcp --dport XX -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth0 -p tcp --sport XX -m state --state ESTABLISHED -j ACCEPT
#Allowing outgoing SSH
-A OUTPUT -o eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp --dport 22 -m state --state ESTABLISHED -j ACCEPT
#Allowing HTTPS
-A INPUT -i eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth0 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT
#Allowing outgoing HTTP
-A OUTPUT -o eth0 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
#Allowing outgoing HTTPS
-A OUTPUT -o eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT
#Allowing every ICMP request (because.)
-A INPUT -p icmp -j ACCEPT
-A OUTPUT -p icmp -j ACCEPT
#Allowing Loopback
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
#Allowing DNS
-A OUTPUT -p udp -o eth0 --dport 53 -j ACCEPT
-A INPUT -p udp -i eth0 --sport 53 -j ACCEPT
-A OUTPUT -p tcp -o eth0 --dport 53 -j ACCEPT
-A INPUT -p tcp -i eth0 --sport 53 -j ACCEPT
-A OUTPUT -p udp -o eth0 --dport 953 -j ACCEPT
-A INPUT -p udp -i eth0 --sport 953 -j ACCEPT
-A OUTPUT -p tcp -o eth0 --dport 953 -j ACCEPT
-A INPUT -p tcp -i eth0 --sport 953 -j ACCEPT
#Allowing sendmail / postfix
-A INPUT -i eth0 -p tcp --dport 25 -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth0 -p tcp --sport 25 -m state --state ESTABLISHED -j ACCEPT
#Very basic DDoS protection
-A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT
With that, the server is unreachable. I tried adding
-A INPUT -m state --state NEW -m tcp -p tcp --dport 32400 -j ACCEPT
but this doesn't change anything. I tried adding every rule indicated here even if I don't care about DLNA, Avahi or anything local.
If someone could help me that'd be awesome! Thank you in advance :)