Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ip6tables -F INPUT
- ip6tables -F OUTPUT
- ip6tables -F FORWARD
- ip6tables -t nat -F PREROUTING
- ip6tables -t nat -F POSTROUTING
- ip6tables -P INPUT DROP
- ip6tables -P FORWARD DROP
- ip6tables -A INPUT -i $EXTERNAL_I -p ipv6-icmp -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 20:21 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 22 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 23 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 25 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 465 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 587 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 53 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m udp -p udp --destination-port 53 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 80 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 113 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m udp -p udp --destination-port 123 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 443 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 655:656 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m udp -p udp --destination-port 655:656 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 6667 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m tcp -p tcp --destination-port 7778:7779 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m udp -p udp --destination-port 60000:61000 -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -p esp -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m state --state RELATED,ESTABLISHED -j ACCEPT
- ip6tables -A INPUT -i $EXTERNAL_I -m state --state NEW,INVALID -j $DENYACTION
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
