limewire using random ports with iptables enabled

frenzy.usa · #2 (**permalink**) January 4th, 2008

Did some more testing and research. The bash script below is what I currently use to allow limewire to work through iptables.

For instructions on how to write your own iptables rules type 'man iptables' in a terminal screen.

Hope this helps some else.

Code:

#!/bin/bash

#
# filename: lw_iptables_rules
# chown: root:root   <-- must be owned and run by root or script will fail
# chmod: 700
#

# Open/close ports (TCP and UDP) 1025 to 50000 for Limewire
#
#
# Created 2007-12-27 by frenzy.usa
# Last updated 2007-12-27 by frenzy.usa
#

# Location of your iptables binary
IPT_BIN="/sbin/iptables"

# IP address of computer that is running limewire
LW_HOST=192.168.1.203

if [ "$1" = "A" ]
then
  echo "Opening limewire ports"
  # TCP ports
  $IPT_BIN -t filter -I FORWARD -p tcp -m tcp -m multiport -s $LW_HOST -i eth0 -o eth1 --ports 1025:50000 -j ACCEPT
  $IPT_BIN -t filter -I FORWARD -p tcp -m tcp -m multiport -d $LW_HOST -i eth1 -o eth0 --ports 1025:50000 -j ACCEPT

  # UDP ports
  $IPT_BIN -t filter -I FORWARD -p udp -m udp -m multiport -s $LW_HOST -i eth0 -o eth1 --ports 1025:50000 -j ACCEPT
  $IPT_BIN -t filter -I FORWARD -p udp -m udp -m multiport -d $LW_HOST -i eth1 -o eth0 --ports 1025:50000 -j ACCEPT

elif [ "$1" = "D" ]
then
  echo "Closing limewire ports"
  # TCP ports
  $IPT_BIN -t filter -D FORWARD -p tcp -m tcp -m multiport -s $LW_HOST -i eth0 -o eth1 --ports 1025: -j ACCEPT
  $IPT_BIN -t filter -D FORWARD -p tcp -m tcp -m multiport -d $LW_HOST -i eth1 -o eth0 --ports 1025: -j ACCEPT

  # UDP ports
  $IPT_BIN -t filter -D FORWARD -p udp -m udp -m multiport -s $LW_HOST -i eth0 -o eth1 --ports 1025: -j ACCEPT
  $IPT_BIN -t filter -D FORWARD -p udp -m udp -m multiport -d $LW_HOST -i eth1 -o eth0 --ports 1025: -j ACCEPT


else
  echo "Usage: $(basename $0) [A|D]"
  echo "      A:  Open ports for limewire"
  echo "      D:  Close ports for limewire"
fi