Advertisement
tamanmerah

/etc/iptables.rules

Feb 3rd, 2019
388
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.20 KB | None | 0 0
  1. # secure iptables.rules
  2. *filter
  3. :INPUT DROP [0:0]
  4. :FORWARD DROP [0:0]
  5. :OUTPUT ACCEPT [0:0]
  6. :LOGGING - [0:0]
  7. -A INPUT -s 192.168.0.0/24 -i wlan0 -j DROP
  8. -A INPUT -s 10.0.0.0/8 -i wlan0 -j DROP
  9. -A INPUT -s 192.168.100.0/24 -j ACCEPT
  10. -A INPUT -i wlan0 -p tcp -m tcp --sport 31337 --dport 31337 -j DROP
  11. -A INPUT -s 192.168.1.0/24 -i wlan0 -j DROP
  12. -A INPUT -p tcp -m multiport --dports 21,22,23,25,80,443,31337,7000,7001,7002,7003,7004,7016 -j DROP
  13. -A INPUT -p tcp -m tcp --dport 80 -m limit --limit 100/min --limit-burst 200 -j ACCEPT
  14. -A INPUT -m conntrack --ctstate INVALID -j DROP
  15. -A INPUT -i lo -j ACCEPT
  16. -A INPUT -p tcp -m state --state ESTABLISHED -j ACCEPT
  17. -A INPUT -p udp -m state --state ESTABLISHED -j ACCEPT
  18. -A INPUT -p icmp -m state --state ESTABLISHED -j ACCEPT
  19. -A INPUT -j LOGGING
  20. -A FORWARD -o wlan0 -p tcp -m tcp --sport 31337 --dport 31337 -j DROP
  21. -A FORWARD -s 192.168.1.0/24 -i wlan0 -j DROP
  22. -A OUTPUT -j ACCEPT
  23. -A OUTPUT -o wlan0 -p tcp -m tcp --sport 31337 --dport 31337 -j DROP
  24. -A OUTPUT -s 192.168.1.0/24 -o wlan0 -j DROP
  25. -A LOGGING -m limit --limit 1/sec -j LOG --log-prefix "IPTables packet DROP: " --log-level 7
  26. -A LOGGING -j DROP
  27. COMMIT
  28. # Completed on Mon Feb 5 02:47:42 2019
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement