Skip to content

Instantly share code, notes, and snippets.

@trastle
Last active August 29, 2015 14:07
Show Gist options
  • Save trastle/6366902b6ffed2ee2456 to your computer and use it in GitHub Desktop.
Save trastle/6366902b6ffed2ee2456 to your computer and use it in GitHub Desktop.
iptables.backup
# Generated by iptables-save v1.4.14 on Sun Oct 5 22:12:18 2014
*filter
:INPUT DROP [8:760]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
# Allow localhost & tunneled traffic
-A INPUT -i lo -j ACCEPT
-A INPUT -i tun0 -j ACCEPT
# Allow DHCP in on eth0
-A INPUT -i eth0 -p udp -m udp --sport 67 --dport 67 -j ACCEPT
-A INPUT -i eth0 -p udp -m udp --sport 68 --dport 68 -j ACCEPT
# Allow SSH in on eth0
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT
# Allow localhost & tunneled traffic
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o tun0 -j ACCEPT
# Allow outbound traffic destined for the local network
-A OUTPUT -d 192.168.1.0/24 -o eth0 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 1194 -j ACCEPT
-A OUTPUT -o eth0 -p udp -m udp --dport 53 -j ACCEPT
COMMIT
# Completed on Sun Oct 5 22:12:18 2014
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment