Skip to content

Instantly share code, notes, and snippets.

@prdanelli
Last active August 29, 2015 14:06
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save prdanelli/fd07d714c240f06488c6 to your computer and use it in GitHub Desktop.
Save prdanelli/fd07d714c240f06488c6 to your computer and use it in GitHub Desktop.
setting up iptables
iptables -A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP &&
iptables -A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j DROP &&
iptables -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,PSH,ACK,URG -j DROP &&
iptables -A INPUT -i lo -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT &&
iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT;
iptables-save > /etc/iptables.rules
iptables-restore < /etc/iptables.rules
#add to rc.local
nano /etc/rc.local
#before exit 0 paste
/sbin/iptables-restore < /etc/iptables.rules
#flush rules
iptables -F
#list rules
iptables -L
#remove individual rules
iptables -D
#append rule
iptables -A
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment