Skip to content

Instantly share code, notes, and snippets.

@jglenn9k
Created November 5, 2014 21:30
Show Gist options
  • Save jglenn9k/6bb3cd440b2ca406d55b to your computer and use it in GitHub Desktop.
Save jglenn9k/6bb3cd440b2ca406d55b to your computer and use it in GitHub Desktop.
Default firewall rules for Managed Operations public cloud Linux server at Rackspace.
# Generated by iptables-save v1.4.7 on Wed Nov 5 21:23:26 2014
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -s 72.3.128.84/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 69.20.0.1/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 69.20.3.135/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 120.136.34.22/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 212.100.225.49/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 212.100.225.42/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 50.57.22.125/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 119.9.4.2/32 -m comment --comment "Rackspace Support" -j ACCEPT
-A INPUT -s 50.56.142.128/26 -m comment --comment "Rackspace Monitoring" -j ACCEPT
-A INPUT -s 180.150.149.64/26 -m comment --comment "Rackspace Monitoring" -j ACCEPT
-A INPUT -s 69.20.52.192/26 -m comment --comment "Rackspace Monitoring" -j ACCEPT
-A INPUT -s 78.136.44.0/26 -m comment --comment "Rackspace Monitoring" -j ACCEPT
-A INPUT -s 50.57.61.0/26 -m comment --comment "Rackspace Monitoring" -j ACCEPT
-A INPUT -s 166.78.7.146/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 50.56.249.239/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 166.78.107.18/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 162.209.4.155/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 95.138.174.55/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 162.13.1.53/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 119.9.12.91/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 119.9.12.98/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 67.192.155.96/27 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 120.136.33.192/27 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 69.20.80.0/28 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 72.4.123.216/32 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 89.234.21.64/28 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 173.203.5.160/27 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 173.203.32.136/29 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -s 64.49.200.192/27 -m comment --comment "Rackspace Automation" -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m conntrack --ctstate NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
# Completed on Wed Nov 5 21:23:26 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment