Skip to content

Instantly share code, notes, and snippets.

@godevnet

godevnet/iptables

Last active August 29, 2015 14:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save godevnet/1bcf6c942391ffd8b54d to your computer and use it in GitHub Desktop.
Save godevnet/1bcf6c942391ffd8b54d to your computer and use it in GitHub Desktop.
Download ZIP
Raw
iptables
# /etc/sysconfig/iptables
# Generated by iptables-save v1.4.21 on Fri Jun 12 12:35:02 2015
*filter
:INPUT DROP [127:13754]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [50:6304]
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -i eno33554984 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i eno33554984 -p udp -m udp --dport 67 -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eno16777736 -o eno33554984 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i eno33554984 -o eno16777736 -j ACCEPT
COMMIT
# Completed on Fri Jun 12 12:35:02 2015
# Generated by iptables-save v1.4.21 on Fri Jun 12 12:35:02 2015
*nat
:PREROUTING ACCEPT [134:15209]
:INPUT ACCEPT [1:64]
:OUTPUT ACCEPT [1:69]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o eno16777736 -j MASQUERADE
COMMIT
# Completed on Fri Jun 12 12:35:02 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment