Skip to content

Instantly share code, notes, and snippets.

@hendricius
Created August 24, 2013 10:29
Show Gist options
  • Save hendricius/6327334 to your computer and use it in GitHub Desktop.
Save hendricius/6327334 to your computer and use it in GitHub Desktop.
#!/bin/bash
#/sbin/iptables -A INPUT -p udp -m udp --dport domain -j ACCEPT
#-A INPUT -p tcp -m tcp --dport 20000 -j ACCEPT
/sbin/iptables -A INPUT -i lo -j ACCEPT
/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/iptables -A INPUT -p tcp -s 127.0.0.1 -m tcp --dport 10000 -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport https -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport http -j ACCEPT
# Rails
/sbin/iptables -A INPUT -p tcp -m tcp --dport 3000 -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport 3001 -j ACCEPT
# Rails Agility
/sbin/iptables -A INPUT -p tcp -m tcp --dport 3005 -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport 3006 -j ACCEPT
/sbin/iptables -A INPUT -p udp -m udp --dport 3006 -j ACCEPT
# Rails for user hendricius
/sbin/iptables -A INPUT -p tcp -m tcp --dport 4000 -j ACCEPT
# Minecraft/teamspeak
/sbin/iptables -A INPUT -p udp -m udp --dport 9987 -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport 10011 -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport 30033 -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport 25565 -j ACCEPT
# IRC
/sbin/iptables -A INPUT -p tcp -m tcp --dport 6667 -j ACCEPT
# VPN
/sbin/iptables -A INPUT -i eth0 -p udp --dport 1194 -j ACCEPT
/sbin/iptables -A OUTPUT -o eth0 -p udp --dport 1194 -j ACCEPT
/sbin/iptables -A INPUT -i tun0 -j ACCEPT
/sbin/iptables -A OUTPUT -o tun0 -j ACCEPT
/sbin/iptables -A FORWARD -o tun0 -j ACCEPT
#/sbin/iptables -A INPUT -p tcp -m tcp --dport 25565 -j ACCEPT
#/sbin/iptables -A INPUT -p tcp -m tcp --dport 6119 -j ACCEPT
#-A INPUT -p tcp -m tcp --dport imaps -j ACCEPT
#-A INPUT -p tcp -m tcp --dport imap -j ACCEPT
#-A INPUT -p tcp -m tcp --dport pop3s -j ACCEPT
#-A INPUT -p tcp -m tcp --dport pop3 -j ACCEPT
#iptables -A INPUT -p tcp -m tcp --dport ftp-data -j ACCEPT
#/sbin/iptables -A INPUT -p tcp -m tcp --dport domain -j ACCEPT
#-A INPUT -p tcp -m tcp --dport smtp -j ACCEPT
/sbin/iptables -A INPUT -p tcp -m tcp --dport ssh -j ACCEPT
/sbin/iptables -P INPUT DROP
/sbin/iptables -P FORWARD DROP
/sbin/iptables -P OUTPUT ACCEPT
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment