Pages

Sunday 25 August 2013

iptables



*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [87:7292]
-A INPUT -d 224.0.0.0/8 -i eth0 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
#ssh
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
#apache
-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
#apache (https)
-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT
#snmp
-A INPUT -p tcp -m state --state NEW -m tcp --dport 161 -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 161 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
#keepalive
-A INPUT -i eth0 -p vrrp -j ACCEPT
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
#keepalive
-A OUTPUT -o eth0 -p vrrp -j ACCEPT
COMMIT

No comments:

Post a Comment