I've installed CSF firewall on my linux, and I have set in my csf.conf:
# Allow incoming TCP ports
TCP_IN = "22,25,53,80,110,143,443,465,587,993,995"
# Allow outgoing TCP ports
TCP_OUT = "20,21,22,25,53,80,110,113,443,587,993,995"
# Allow incoming UDP ports
UDP_IN = "20,21,53"
# Allow outgoing UDP ports
# To allow outgoing traceroute add 33434:33523 to this list
UDP_OUT = "20,21,53,113,123,33434:33523"
Despite of this I caot make outgoing 443 coections from the server. (I tested using command: links2 https://www.google.com)
If I add manually rule:
iptables -I INPUT -s 0.0.0.0/0 -m state --state ESTABLISHED -p tcp --sport 443 -j ACCEPT
Then it works. But why it doesn't work from the configuration above? Is that possible to do it simply in CSF?
I'm not sure also if my additional rule is safe.
Thanks in advance for any hints.
برچسب:
نویسنده: استخدام کار