I have this iptables where all working except tcp/udp port 3478 and 5349.$ cat /etc/sysconfig/iptables# Generated by iptables-save v1.4.7 on Thu Nov 21 10:21:41 2013*filter:FORWARD ACCEPT [0:0]:INPUT ACCEPT [0:0]:OUTPUT ACCEPT [0:0]-A INPUT -p tcp -m tcp --dport 3478 -j ACCEPT-A INPUT -p tcp -m tcp --dport 5349 -j ACCEPT-A INPUT -p udp -m udp --dport 5349 -j ACCEPT-A INPUT -p udp -m udp --dport 3478 -j ACCEPT-A INPUT -p tcp -m tcp --dport 10000 -j ACCEPT-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT-A INPUT -p tcp -m tcp --dport 5222 -j ACCEPT-A INPUT -p tcp -m tcp --dport 5269 -j ACCEPT-A INPUT -p udp -m udp -m string --dport 5080 -j DROP  --string friendly-scanner --algo bm --to 65535 -A INPUT -p udp -m udp -m string --dport 5060 -j DROP  --string friendly-scanner --algo bm --to 65535 -A INPUT -p tcp -m tcp --dport 5081 -j ACCEPT-A INPUT -p udp -m udp --dport 5081 -j ACCEPT-A INPUT -p tcp -m tcp --dport 5080 -j ACCEPT-A INPUT -p udp -m udp --dport 5080 -j ACCEPT-A INPUT -p tcp -m tcp --dport 5061 -j ACCEPT-A INPUT -p udp -m udp --dport 5061 -j ACCEPT-A INPUT -p tcp -m tcp --dport 5060 -j ACCEPT-A INPUT -p udp -m udp --dport 5060 -j ACCEPT-A INPUT -p udp -m udp --dport 16000:42000 -j ACCEPT-A INPUT -p tcp -m tcp --dport 7007 -j ACCEPT-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT-A INPUT -p icmp -j ACCEPT-A INPUT -i lo -j ACCEPT-A INPUT -p tcp -m state -m tcp --dport 22 --state NEW -j ACCEPT-A INPUT -j REJECT --reject-with icmp-host-prohibited-A INPUT -s 178.162.205.224/32 -j DROP-A INPUT -s 65.55.44.100/32 -j DROP-A INPUT -s 178.162.205.224/32 -j DROP-A INPUT -s 91.218.247.162/32 -j DROP-A INPUT -s 85.25.78.58/32 -j DROP-A INPUT -s 91.218.247.162/32 -j DROP-A FORWARD -j REJECT --reject-with icmp-host-prohibited-A INPUT -j ACCEPTCOMMIT# Completed on Thu Nov 21 10:21:41 2013# Generated by webmin*mangle:FORWARD ACCEPT [0:0]:INPUT ACCEPT [0:0]:OUTPUT ACCEPT [0:0]:PREROUTING ACCEPT [0:0]:POSTROUTING ACCEPT [0:0]COMMIT# Completed# Generated by webmin*nat:OUTPUT ACCEPT [0:0]:PREROUTING ACCEPT [0:0]:POSTROUTING ACCEPT [0:0]COMMIT# Completed
iptables - why the stun, turn ports are not working to allow end points to access the server?
networking;centos;security;iptables;firewall