Syndicate content

iptables

Nov 13
0

IPTables example - basic up and running

Mon, 2006-11-13 09:31 — superuser

After editting /etc/sysconfig/iptables you need to do iptables-reload /etc/sysconfig/iptables - you can then confirm the rules by iptables -L

#Defaults - Don't forward or allow anything in by default, but allow outgoing by default
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
 
-I INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-I OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
 
#####################################################
# IP restrict SSH to known hosts
# The office static IP
-A INPUT -p tcp -m tcp -s 193.193.193.193 --dport 22 -j ACCEPT