Hi,

I am completely new to Linux, but purchased a dedicated server with no support.. :( . so I need to take care of that server..

While defining the iptable in my server, I entered the following details in the table.

*filter

# Allow all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0
-A INPUT -i lo -j ACCEPT
-A INPUT ! -i lo -d 127.0.0.0/8 -j REJECT

# Accept all established inbound connections
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

# Allow all outbound traffic - you can modify this to only allow certain traffic
-A OUTPUT -j ACCEPT

# Allow HTTP and HTTPS connections from anywhere (the normal ports for websites and SSL).
# -A INPUT -p tcp --dport 80 -j ACCEPT
# -A INPUT -p tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT

# Allow WHM
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2087 -j ACCEPT

# Allow c-panel access
-A INPUT -p tcp -m state --state NEW -m tcp --dport 2083 -j ACCEPT

# Allow SSH connections
#
# The -dport number should be the same port number you set in sshd_config
#
-A INPUT -p tcp -m state --state NEW --dport 2222 -j ACCEPT

# Allow DNS server access
#
-A INPUT -p tcp -m state --state NEW -m tcp --dport 53 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 53 -j ACCEPT

# Allow ping
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT

# Log iptables denied calls
-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7

# Reject all other inbound - default deny unless explicitly allowed policy
-A INPUT -j REJECT
-A FORWARD -j REJECT

COMMIT

In the above code, you can see, I have not added anything for eli, radsec and rockwell-csp2, but when I ran iptables -L command after one day, it gave me following output

Chain INPUT (policy ACCEPT)
target  prot opt source    destination
ACCEPT  all -- anywhere    anywhere
REJECT  all -- anywhere    127.0.0.0/8   reject-with icmp-port-unreachable
ACCEPT  all -- anywhere    anywhere   state RELATED,ESTABLISHED
ACCEPT  tcp -- anywhere    anywhere   state NEW tcp dpt:http
ACCEPT  tcp -- anywhere    anywhere   state NEW tcp dpt:https
ACCEPT  tcp -- anywhere    anywhere   state NEW tcp dpt:eli
ACCEPT  tcp -- anywhere    anywhere   state NEW tcp dpt:radsec
ACCEPT  tcp -- anywhere    anywhere   state NEW tcp dpt:rockwell-csp2
ACCEPT  tcp -- anywhere    anywhere   state NEW tcp dpt:domain
ACCEPT  udp -- anywhere    anywhere   state NEW udp dpt:domain
ACCEPT  icmp -- anywhere    anywhere   icmp echo-request
LOG  all -- anywhere    anywhere   limit: avg 5/min burst 5 LOG level debug prefix `iptables denied: '
REJECT  all -- anywhere    anywhere   reject-with icmp-port-unreachable

Chain FORWARD (policy ACCEPT)
target  prot opt source    destination
REJECT  all -- anywhere    anywhere   reject-with icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target  prot opt source    destination
ACCEPT  all -- anywhere    anywhere

Now the questions is what is the meaning of eli, radsec and rockwell-csp2.. Why its showing up in the output ? is there any issue in my server ?

waiting for someone's replay....

Thank you