Skip to content

Instantly share code, notes, and snippets.

@mrprompt
Created February 15, 2013 13:39
Show Gist options
  • Save mrprompt/68eadcf7ec97eaf76904 to your computer and use it in GitHub Desktop.
Save mrprompt/68eadcf7ec97eaf76904 to your computer and use it in GitHub Desktop.
Firewall
# Completed on Thu Jul 9 00:50:55 2009
# Generated by iptables-save v1.4.1.1 on Thu Jul 9 00:50:55 2009
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -i ! lo -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i ! lo -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -i ! lo -p tcp -m state --state NEW -m tcp --dport 10000 -j ACCEPT
-A INPUT -i ! lo -p icmp -m limit --limit 1/sec -j ACCEPT
-A OUTPUT -j ACCEPT
-A OUTPUT -o ! lo -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o ! lo -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A OUTPUT -o ! lo -p tcp -m state --state NEW -m tcp --dport 10000 -j ACCEPT
-A OUTPUT -o ! lo -p icmp -j ACCEPT
-t nat -A POSTROUTING -s 201.33.19.171 -j SNAT --to-source 201.33.19.177-201.33.19.178
COMMIT
# Completed on Thu Jul 9 00:50:55 2009
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment