Network Ports Revision as of 22:35, 23 January 2021 by LZ1SEO (Talk | contribs) (→‎iptables) (diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

This instruction is intended for administrators of BrandMeister DMR Servers

I am using the following set of ports for incoming connections. For your convenience, there is a set of iptables rules provided below.

Ports used by BrandMeister

• TCP/80
  • Webserver with status pages and HTTP API
• UDP/30001
  • D-STAR D-Extra reflector client
• UDP/30051,30062
  • D-STAR DCS reflector client
• TCP/5200
  • Echolink client
• UDP/5198:5199
  • Echolink
• UDP/50000:50002
  • Hytera Multi-Site Connect
• UDP/55000
  • Motorola IP Site Connect
• UDP/62030
  • Homebrew repeater protocol (Generic)
• UDP/62031
  • Homebrew repeater protocol (MMDVMHost)
• UDP/54003
  • Tellus Agent
• UDP/54004
  • Radioactivity
• UDP/54000
• TCP/54000
  • FastForward network protocol
• UDP/62010
  • DMR+ s-master
• UDP/55001
  • IPSC for external networks connection (such as SmartPTT)
• UDP/42420:42422
  • c-Bridge CC-CC link connections
• UDP/10002
  • XLX Interlink
• TCP/50180
• UDP/50178:50200
  • Hytera RoIP (PDC760)
• UDP/54006
  • Open DMR Terminal RoIP (Boxchip S900A and others)

iptables

iptables  -P INPUT ACCEPT
ip6tables -P INPUT ACCEPT

iptables  -P OUTPUT ACCEPT
ip6tables -P OUTPUT ACCEPT

iptables  -F; iptables  -X
ip6tables -F; ip6tables -X

iptables  -A INPUT -i lo -j ACCEPT
ip6tables -A INPUT -i lo -j ACCEPT

iptables  -t raw -F; iptables  -t raw -X
ip6tables -t raw -F; ip6tables -t raw -X

iptables  -t raw -A OUTPUT -j CT --notrack
ip6tables -t raw -A OUTPUT -j CT --notrack

iptables  -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP mqtt"
ip6tables -A INPUT ! -i lo -p tcp --dport 1883  -j DROP -m comment --comment "DROP mqtt"
iptables  -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP tt"
ip6tables -A INPUT ! -i lo -p tcp --dport 3301  -j DROP -m comment --comment "DROP tt"
iptables  -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP sap"
ip6tables -A INPUT ! -i lo -p udp --dport 54005 -j DROP -m comment --comment "DROP sap"