Guest User

Untitled

a guest
Nov 21st, 2018
101
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.00 KB | None | 0 0
  1. iptables -F
  2. iptables -A INPUT -i lo -j ACCEPT
  3. iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT
  4. iptables -A INPUT -j DROP
  5. iptables -A INPUT -p udp --dport 67:68 -j ACCEPT
  6. iptables -A INPUT -p tcp --dport 67:68 -j ACCEPT
  7. iptables -A INPUT -p udp --dport 53 -j ACCEPT
  8. iptables -A INPUT -p tcp --dport 80 -j ACCEPT
  9. iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
  10. iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
  11.  
  12. Add ACCEPT rules to your firewall configuration script to re-enable access to
  13. • DHCP (UDP and TCP ports 67 and possibly 68?) Be able to explain which ports you blocked.
  14. • DNS (UDP port 53)
  15. • HTTPD (TCP port 80)
  16. • Ping (ICMP not UDP or TCP!) services from our network only! Use CIDR mask notation.
  17. Use the iptables man page as a reference for writing your new rules
  18. Save and re-apply your rules.
  19. Confirm the network services are now available again by re-running ping and refreshing/reloading your QTWeb browser page on WINPE2.
Add Comment
Please, Sign In to add comment