Skip to content

Instantly share code, notes, and snippets.

@lahaxearnaud

lahaxearnaud/shorewall config

Created November 6, 2018 06:00
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save lahaxearnaud/b3cc8dff735712a66bd74ac99afb10d4 to your computer and use it in GitHub Desktop.
Save lahaxearnaud/b3cc8dff735712a66bd74ac99afb10d4 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
shorewall config
#ACTION SOURCE DEST PROTO DEST SOURCE ORIGINAL RATE USER/ $
# PORT PORT(S) DEST LIMIT GROUP
#SECTION ALL
#SECTION ESTABLISHED
#SECTION RELATED
SECTION NEW
# Drop Ping from the "bad" net zone.. and prevent your log from being flooded..
Ping(DROP) net $FW
# Open 123 for ntpd service on startup
ACCEPT fw net udp 123
# Allow standard services in and out of the box
ACCEPT fw net udp 53 # DNS
ACCEPT fw net tcp 53 # DNS
ACCEPT net fw tcp 22 # SSH
ACCEPT net fw tcp 80 # HTTP
ACCEPT net fw tcp 443 # HTTPS
ACCEPT net fw tcp 21 # FTP
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment