Stuff

public text v1 · immutable

#220960

·published 2006-10-25 12:48 UTC

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT

iptables -A INPUT -p udp -m udp --dport 137 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 138 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 139 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 445 -j ACCEPT
iptables -A INPUT -s 127.0.0.1 -j ACCEPT

iptables -A OUTPUT -p udp -m udp --dport 137 -j ACCEPT 
iptables -A OUTPUT -p udp -m udp --dport 138 -j ACCEPT
iptables -A OUTPUT -p tcp -m tcp --dport 139 -j ACCEPT
iptables -A OUTPUT -p tcp -m tcp --dport 445 -j ACCEPT
iptables -A OUTPUT -d 127.0.0.1 -j ACCEPT