Firehol cheatsheet

firehol-cheatsheet.sh

#Define custom service directly inside interface block
server custom grayrests "tcp/9000" any accept

#Common noise ports
server custom plex "tcp/32412" any drop
server custom smb "tcp/445" any drop

#Whitelist an ip address(es)
server all accept src "8.8.8.8,1.1.1.1"

#Docker integration 
docker_bridge docker_gwbridge 172.18.0.0/16
docker_bridge docker0 172.17.0.0/16

interface docker_gwbridge,docker0 dockerContainers
        policy accept

#Restrict interface to be ipv4 only
interface4 eth0 wan 
        xxxx
        
#Drop all requests to broadcasting network
ipv4 server all drop dst "62.210.202.255"