Skip to content

Instantly share code, notes, and snippets.

@terrywang
Last active October 13, 2015 22:07
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save terrywang/4262660 to your computer and use it in GitHub Desktop.
Save terrywang/4262660 to your computer and use it in GitHub Desktop.
iptables rules for the Confluence wiki box
*filter
-P INPUT DROP
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
# -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
# -A INPUT -p tcp -m tcp --dport 8080 -j ACCEPT
# -A INPUT -p tcp -m tcp --dport 4567 -j ACCEPT
COMMIT
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment