Skip to content

Instantly share code, notes, and snippets.

@scry3r
Last active April 26, 2018 16:08
Show Gist options
  • Save scry3r/31419df22d7fed0c4755bb62eb72b47a to your computer and use it in GitHub Desktop.
Save scry3r/31419df22d7fed0c4755bb62eb72b47a to your computer and use it in GitHub Desktop.
# become root
sudo -i
# flush all existing rules
iptables -F
# Accept traffic from existing connections
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# accept SSH connections
iptables -A INPUT -p tcp --dport ssh -j ACCEPT
# allow connections from our servers
iptables -A INPUT -i eth1 -p tcp -s 95.134.189.134 --dport 5432 -j ACCEPT
iptables -A INPUT -i eth1 -p tcp -s 82.207.117.87 --dport 5432 -j ACCEPT
# drop the remaining traffic
iptables -A INPUT -j DROP
# listen for loopback traffic
iptables -I INPUT 1 -i lo -j ACCEPT
# list rules
iptables -L -v
# store iptables rules
iptables-save > /etc/iptables.rules
# finish root session
exit
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment