Skip to content

Instantly share code, notes, and snippets.

@multun

multun/gist:ff5f938080caa8c13d650cae6f87cb5f

Created June 1, 2019 19:17
Show Gist options
  • Save multun/ff5f938080caa8c13d650cae6f87cb5f to your computer and use it in GitHub Desktop.
Save multun/ff5f938080caa8c13d650cae6f87cb5f to your computer and use it in GitHub Desktop.
Download ZIP
Iptables filter non-root traffic
Raw
gistfile1.txt
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m mark --mark 0x2a -j LOG # or whatever you like
-A OUTPUT -m mark --mark 0x2a -j LOG
COMMIT
*mangle
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -j CONNMARK --restore-mark --nfmask 0xffffffff --ctmask 0xffffffff
-A OUTPUT -m owner ! --uid-owner 0 -j MARK --set-xmark 0x2a/0xffffffff
-A POSTROUTING -j CONNMARK --save-mark --nfmask 0xffffffff --ctmask 0xffffffff
COMMIT
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment