ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp spt:5000
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 tcp dpt:5000
2. Add the jump setting for the PSA-MMB_LAN chain to INPUT and OUTPUT chains.
Make the setting such that there are no interruptions by an existing REJECT setting in an INPUT or OUTPUT
chain or by a user definition chain.
Here, use the following command to add the setting to the fifth INPUT chain (before the REJECT setting)
and to the OUTPUT chain. (For details on the iptables option, see the man manual.)
# /sbin/iptables –I INPUT 5 –j PSA-MMB_LAN
# /sbin/iptables –A OUTPUT –j PSA-MMB_LAN
3. Execute the iptables -L command, and confirm that the PSA-MMB_LAN chains added to the INPUT and
OUTPUT chains are not interrupted by the previous REJECT, DROP, or other settings.
Example of settings:
# iptables –L
Chain INPUT (policy ACCEPT)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state
RELATED,ESTABLISHED
ACCEPT icmp -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT tcp -- 0.0.0.0/0 0.0.0.0/0 state NEW tcp dpt:22
PSA-MMB_LAN all -- 0.0.0.0/0 0.0.0.0/0
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
Chain FORWARD (policy ACCEPT)
target prot opt source destination
REJECT all -- 0.0.0.0/0 0.0.0.0/0 reject-with icmp-host-
prohibited
Chain OUTPUT (policy ACCEPT)
target prot opt source destination
PSA-MMB_LAN all -- 0.0.0.0/0 0.0.0.0/0
Chain MMLAN (2 references)
target prot opt source destination
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
ACCEPT all -- 0.0.0.0/0 0.0.0.0/0
PRIMEQUEST 1000 Series Installation Manual
APPENDIX B Manual PSA Installation and Uninstallation
241
C122-E107-09EN