All pastes #164210 Raw Edit

Untitled

public text v1 · immutable
·published 2006-09-08 11:58 UTC
rendered paste body
#!/bin/bash

iptables -F
iptables -X

iptables -t mangle -F
iptables -t mangle -X

iptables -t nat -F
iptables -t nat -X

iptables -N dom0
iptables -A dom0 -j ACCEPT

iptables -N node1
iptables -A node1 -j ACCEPT

iptables -P INPUT DROP
iptables -A INPUT -p tcp -d 10.1.1.253 --syn -j dom0
iptables -A INPUT -p tcp -d 10.1.1.100 --syn -j node1

iptables -P FORWARD DROP

iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -P OUTPUT DROP

#echo 1 > /proc/sys/net/ipv4/ip_forward