Skip to content

Instantly share code, notes, and snippets.

@arselzer
Last active August 29, 2015 13:57
Show Gist options
  • Save arselzer/9508691 to your computer and use it in GitHub Desktop.
Save arselzer/9508691 to your computer and use it in GitHub Desktop.
Firewall
# Generated by iptables-save v1.4.14 on Thu Apr 10 14:00:01 2014
*filter
:INPUT ACCEPT [940754:144681650]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [266343191:21267838144]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -s 192.168.178.61/32 -j ACCEPT
-A INPUT -s 127.0.0.1/32 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25565 -j ACCEPT
COMMIT
# Completed on Thu Apr 10 14:00:01 2014
# Generated by iptables-save v1.4.14 on Wed Mar 12 14:59:29 2014
*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [600:92530]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -s 127.0.0.0/24 -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
COMMIT
# Generated by iptables-save v1.4.14 on Thu Apr 10 14:22:24 2014
*filter
:INPUT DROP [614617:102446010]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --dport 8088 -j ACCEPT
-A FORWARD -j ACCEPT
-A OUTPUT -j ACCEPT
COMMIT
# Completed on Thu Apr 10 14:22:24 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment