Quantcast
Channel: Linux — Plex Forums
Viewing all articles
Browse latest Browse all 7311

Yet another Plex + iptables question

$
0
0

Hello guys,

I've searched and tried everything on here and elsewhere, but it still doesn't work...

I have a dedicated server on which Plex is installed. I use the app.plex.tv/web/app to connect to the server from home.
When iptables rules are empty, everything works fine. If I apply my rules, the server cant be seen from the app.plex.tv/web/app

Here are my rules

#Default policy: drop everything
-P INPUT DROP
-P FORWARD DROP
-P OUTPUT DROP

#Allowing SSH (XX being my SSH port)
-A INPUT -i eth0 -p tcp --dport XX -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth0 -p tcp --sport XX -m state --state ESTABLISHED -j ACCEPT

#Allowing outgoing SSH
-A OUTPUT -o eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp --dport 22 -m state --state ESTABLISHED -j ACCEPT

#Allowing HTTPS
-A INPUT -i eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth0 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT

#Allowing outgoing HTTP
-A OUTPUT -o eth0 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT

#Allowing outgoing HTTPS
-A OUTPUT -o eth0 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -i eth0 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT

#Allowing every ICMP request (because.)
-A INPUT -p icmp -j ACCEPT
-A OUTPUT -p icmp -j ACCEPT

#Allowing Loopback
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT

#Allowing DNS
-A OUTPUT -p udp -o eth0 --dport 53 -j ACCEPT
-A INPUT -p udp -i eth0 --sport 53 -j ACCEPT
-A OUTPUT -p tcp -o eth0 --dport 53 -j ACCEPT
-A INPUT -p tcp -i eth0 --sport 53 -j ACCEPT

-A OUTPUT -p udp -o eth0 --dport 953 -j ACCEPT
-A INPUT -p udp -i eth0 --sport 953 -j ACCEPT
-A OUTPUT -p tcp -o eth0 --dport 953 -j ACCEPT
-A INPUT -p tcp -i eth0 --sport 953 -j ACCEPT

#Allowing sendmail / postfix
-A INPUT -i eth0 -p tcp --dport 25 -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -o eth0 -p tcp --sport 25 -m state --state ESTABLISHED -j ACCEPT

#Very basic DDoS protection
-A INPUT -p tcp --dport 80 -m limit --limit 25/minute --limit-burst 100 -j ACCEPT

With that, the server is unreachable. I tried adding
-A INPUT -m state --state NEW -m tcp -p tcp --dport 32400 -j ACCEPT

but this doesn't change anything. I tried adding every rule indicated here even if I don't care about DLNA, Avahi or anything local.

If someone could help me that'd be awesome! Thank you in advance :)


Viewing all articles
Browse latest Browse all 7311

Trending Articles