You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
24 lines
852 B
24 lines
852 B
7 years ago
|
# iptables.test.rules
|
||
|
|
*filter
|
||
|
|
# Allows all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0
|
||
|
|
-A INPUT -i lo -j ACCEPT
|
||
|
|
# Accepts all established inbound connections
|
||
|
|
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
|
||
|
|
# Allows all outbound traffic
|
||
|
|
# You could modify this to only allow certain traffic
|
||
|
|
-A OUTPUT -j ACCEPT
|
||
|
|
# DNS
|
||
|
|
-A INPUT -p tcp --dport 53 -j ACCEPT
|
||
|
|
-A INPUT -p udp --dport 53 -j ACCEPT
|
||
|
|
# SSH Access Port
|
||
|
|
-A INPUT -p tcp --dport 22 -j ACCEPT
|
||
|
|
-A INPUT -p tcp --dport 49824 -j ACCEPT
|
||
|
|
# Allow ping
|
||
|
|
#-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
|
||
|
|
# log iptables denied calls (access via 'dmesg' command)
|
||
|
|
-A INPUT -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7
|
||
|
|
# Reject all other inbound - default deny unless explicitly allowed policy:
|
||
|
|
-A INPUT -j REJECT
|
||
|
|
-A FORWARD -j REJECT
|
||
|
|
COMMIT
|