Skip to content

Instantly share code, notes, and snippets.

@bessangel

bessangel/rules

Last active October 13, 2017 13:43
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bessangel/7312dbdc081d201bd9e8459d9f1c4e08 to your computer and use it in GitHub Desktop.
Save bessangel/7312dbdc081d201bd9e8459d9f1c4e08 to your computer and use it in GitHub Desktop.
Download ZIP
shorewall zimbra
Raw
rules
#
# Shorewall version 4 - Rules File
#
# For information on the settings in this file, type "man shorewall-rules"
#
# The manpage is also online at
# http://www.shorewall.net/manpages/shorewall-rules.html
#
######################################################################################################################################################################################################
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ MARK CONNLIMIT TIME HEADERS SWITCH HELPER
# PORT PORT(S) DEST LIMIT GROUP
?SECTION ALL
?SECTION ESTABLISHED
?SECTION RELATED
?SECTION INVALID
?SECTION UNTRACKED
?SECTION NEW
Invalid(DROP) net $FW tcp
SSH(ACCEPT) net $FW
Ping(ACCEPT) net $FW
ACCEPT net $FW tcp 2002
ACCEPT net $FW tcp 21,25,80,110,443,465,587,993,995,8443
# for zimbra system tasks
DNAT $FW $FW:127.0.0.1:2002 tcp 22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment