Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- -P INPUT ACCEPT
- -P FORWARD DROP
- -P OUTPUT ACCEPT
- -A INPUT -i lo -j ACCEPT
- -A INPUT -i lan -j ACCEPT
- -A INPUT ! -i lan -p udp -m udp --dport 67 -j REJECT --reject-with icmp-port-unreachable
- -A INPUT ! -i lan -p udp -m udp --dport 53 -j REJECT --reject-with icmp-port-unreachable
- -A INPUT -i wan -p tcp -m tcp --dport 15934 -j ACCEPT
- -A INPUT ! -i lan -p tcp -m tcp --dport 0:1023 -j DROP
- -A INPUT ! -i lan -p udp -m udp --dport 0:1023 -j DROP
- -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m limit --limit 1/sec -j ACCEPT
- -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK RST -m limit --limit 1/sec -j ACCEPT
- -A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
- -A INPUT -p icmp -m icmp --icmp-type 8 -j DROP
- -A INPUT -s 92.47.32.24/32 -p tcp -m tcp --dport 80 -j DROP
- -A INPUT -s 92.113.192.93/32 -p tcp -m tcp --dport 80 -j DROP
- -A INPUT -s 62.133.173.236/32 -p tcp -m tcp --dport 80 -j DROP
- -A INPUT -s 81.88.117.135/32 -p tcp -m tcp --dport 80 -j DROP
- -A FORWARD -d 192.168.1.0/24 -i lan -j DROP
- -A FORWARD -s 192.168.1.0/24 -i lan -j ACCEPT
- -A FORWARD -d 192.168.1.0/24 -i wan -j ACCEPT
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
