Opening port on IPTables not working
8,045
Gazareth, if you notice besides iptables INPUT queue rules, you have configured OUTPUT queue rules, and the 8080/TCP port is not allowed/configured in the OUTPUT queue.
As you have added:
iptables -I INPUT -p tcp --dport 8080 -j ACCEPT
You also need to add:
iptables -I OUTPUT -p tcp --sport 8080 -j ACCEPT
iptables is capable of maintaining stateful firewall rules, and as such, instead of maintaining two different queues, it is also possible to do:
iptables -I INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
Be aware that while doing it by hand, you use -I to place rules at the top of the queue, and when doing it in a batch file, typically you do iptables -A.
Saving Iptables Firewall Rules Permanently
25 Most Frequently Used Linux IPTables Rules Examples
Related videos on Youtube
03 : 32
How to open a port using iptables
01 : 51
How to open port in Ubuntu 16.04 | 18.04 | 20.04
02 : 58
IPtables - opening ports not working (2 Solutions!!)
02 : 59
Unix & Linux: Opening port on IPTables not working (2 Solutions!!)
01 : 39
DevOps & SysAdmins: Opening ports with IPTables not working - Ubuntu
Author by
gazareth
Updated on September 18, 2022Comments
-
gazareth over 1 year
I'm trying to get Jenkins running on a RHEL 6 server. Jenkins is installed but not accessible due to firewall rules. If I stop iptables with
service iptables stop, I can access Jenkins in my browser on port 8080. With the service restarted, I can't access it.I have tried various ways of adding a rule to iptables to allow traffic on port 8080, to no avail.
Here is the current output of
iptables -L -nwith the Jenkins/port 8080 rule at the first line of the INPUT section:Chain INPUT (policy DROP) target prot opt source destination ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:8080 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 0 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:5353 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:5353 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:5353 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:5353 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:443 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:123 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:161 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:161 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:389 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:389 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:636 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:636 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:8140 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:8140 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:111 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:111 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:111 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:2049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4046 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:4046 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:4046 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:4046 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:4045 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4045 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:4047 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4047 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:4049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:514 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:717 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:717 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:6000 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:6000 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2435 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:2435 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4526 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:4526 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2659 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:2659 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:1521 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:1521 Chain FORWARD (policy DROP) target prot opt source destination Chain OUTPUT (policy DROP) target prot opt source destination ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 0 ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0 icmp type 8 ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:22 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:25 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:53 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:53 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:5353 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:5353 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:5353 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:5353 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:80 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:443 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:443 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:123 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:161 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:161 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:389 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:389 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:636 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:636 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:8140 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:8140 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:111 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:111 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:111 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:111 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:2049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:2049 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:2049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:4046 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4046 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:4046 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp dpt:4046 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:4045 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:4045 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:4047 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:4047 ACCEPT udp -- 0.0.0.0/0 0.0.0.0/0 udp spt:4049 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:514 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:514 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:6000 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:6000 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:717 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:717 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:2435 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2435 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:4526 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:4526 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:2659 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:2659 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:1521 ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:1521 -
gazareth over 8 yearsI am not trying to forward to port 80. I am trying to access on port 8080.