Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- #!/bin/sh
- # Local loop
- iptables -A INPUT -i lo -j ACCEPT
- iptables -A INPUT ! -i lo -d 127.0.0.0/8 -j REJECT
- # PING
- iptables -A INPUT -p icmp --icmp-type 8 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
- iptables -A OUTPUT -p icmp --icmp-type 8 -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
- # FTP
- # Outgoing
- iptables -A INPUT -i ens33 -p tcp --sport 21 -m state --state ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --dport 21 -m state --state NEW,ESTABLISHED -j ACCEPT
- # DNS
- iptables -A INPUT -i ens33 -p udp --sport 53 -m state --state ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p udp --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT
- iptables -A INPUT -i ens33 -p tcp --sport 53 -m state --state ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT
- # WHOIS
- iptables -A INPUT -p tcp --sport 43 -j ACCEPT
- iptables -A OUTPUT -p tcp --dport 43 -j ACCEPT
- # SSH
- # Incoming
- iptables -A INPUT -i ens33 -p tcp --dport 2222 -m state --state NEW,ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --sport 2222 -m state --state ESTABLISHED -j ACCEPT
- # Outgoing
- iptables -A INPUT -i ens33 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
- # HTTP
- # Incoming
- iptables -A INPUT -i ens33 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
- # Outgoing
- iptables -A INPUT -i ens33 -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
- # HTTPS
- # Incoming
- iptables -A INPUT -i ens33 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT
- # Outgoing
- iptables -A INPUT -i ens33 -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT
- iptables -A OUTPUT -o ens33 -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
