| iptables -F | |
| iptables -N LOGALL | |
| iptables -N INPUT_LOGGED | |
| iptables -A LOGALL -m state --state NEW -j LOG --log-level 7 --log-prefix "IPTABLES NEW: " | |
| ## iptables -A LOGALL -j LOG --log-level 7 --log-prefix "IPTABLES ALL: " | |
| iptables -A LOGALL -j INPUT_LOGGED | |
| iptables -A INPUT -p tcp --dport 22 -j ACCEPT | |
| iptables -A INPUT -j LOGALL | |
| ### iptables -A INPUT_LOGGED -p tcp --dport 990 -j ACCEPT # FTP | |
| ### iptables -A INPUT_LOGGED -p tcp --dport 989 -j ACCEPT # FTPS | |
| ### iptables -A INPUT_LOGGED -p tcp --dport 21 -j ACCEPT # FTP | |
| iptables -A INPUT_LOGGED -p tcp --dport 953 -j ACCEPT # RNDC | |
| ### iptables -A INPUT_LOGGED -p tcp --dport 5984 -j ACCEPT # couchdb | |
| iptables -A INPUT_LOGGED -p tcp --dport 4444:5555 -j ACCEPT | |
| iptables -A INPUT_LOGGED -m state --state ESTABLISHED,RELATED -j ACCEPT | |
| iptables -A INPUT_LOGGED -p tcp -j DROP | |
| # /etc/init.d/iptables save active |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment