iptables -A INPUT -m state --state NEW -p tcp --dport 9102 -j ACCEPT
iptables -A INPUT -m state --state NEW -p tcp --dport 9101:9103 -j ACCEPT

iptables -A OUTPUT -m state --state NEW -p tcp --dport 9101 -j ACCEPT
iptables -A OUTPUT -m state --state NEW -p tcp --dport 9103 -j ACCEPT
iptables -A OUTPUT -m state --state NEW -p tcp --dport 9102:9103 -j ACCEPT





# iptables -L -v
Chain INPUT (policy DROP 3657 packets, 417K bytes)
 pkts bytes target     prot opt in     out     source               destination         
   54  2860 ACCEPT     all  --  any    any     localhost.localdomain  anywhere            
    0     0 ACCEPT     icmp --  any    any     anywhere             anywhere            icmp echo-request 
22069 1471K ACCEPT     tcp  --  any    any     anywhere             anywhere            tcp dpt:ssh 
 192K   34M ACCEPT     udp  --  any    any     anywhere             anywhere            udp dpt:1191 
    6   360 ACCEPT     all  --  tun+   any     anywhere             anywhere            
    0     0 ACCEPT     all  --  tap+   any     anywhere             anywhere            
 828K   84M ACCEPT     all  --  eth1   any     anywhere             anywhere            
1376K 1865M ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            state NEW tcp dpt:bacula-fd 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            state NEW tcp dpts:bacula-dir:bacula-sd 

Chain FORWARD (policy DROP 0 packets, 0 bytes)
 pkts bytes target     prot opt in     out     source               destination         
    0     0 DROP       all  --  eth1   any    !192.168.3.0/24       anywhere            
 166K   21M ACCEPT     all  --  tun+   any     anywhere             anywhere            
    0     0 ACCEPT     all  --  tap+   any     anywhere             anywhere            
98084   48M ACCEPT     all  --  eth0   any     anywhere             anywhere            
 290K   33M ACCEPT     all  --  eth1   any     anywhere             anywhere            
    0     0 ACCEPT     all  --  any    eth0    anywhere             anywhere            state NEW 
    0     0 ACCEPT     all  --  any    any     anywhere             anywhere            state RELATED,ESTABLISHED 

Chain OUTPUT (policy ACCEPT 2895K packets, 2012M bytes)
 pkts bytes target     prot opt in     out     source               destination         
19820 1372K ACCEPT     all  --  any    eth0    anywhere             anywhere            state NEW 
    1    60 ACCEPT     tcp  --  any    any     anywhere             anywhere            state NEW tcp dpt:bacula-dir 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            state NEW tcp dpt:bacula-sd 
    0     0 ACCEPT     tcp  --  any    any     anywhere             anywhere            state NEW tcp dpts:bacula-fd:bacula-sd