All pastes #348918 Raw Edit

Untitled

public shellscript v1 · immutable
·published 2007-02-10 12:38 UTC
rendered paste body
#!/bin/bash# personal firewall# 2006 by b42, b42@centrum.cz## good luck if you're using thisIPT=$(which iptables)fw_up(){	$IPT -F	$IPT -P INPUT DROP	$IPT -P OUTPUT ACCEPT	$IPT -P FORWARD DROP	$IPT -A INPUT -i lo -j ACCEPT	$IPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT	#$IPT -A INPUT -p tcp --dport auth -j ACCEPT	$IPT -A INPUT -p tcp --dport 22 -j ACCEPT	$IPT -A INPUT -p icmp --icmp-type echo-request -j ACCEPT}fw_openall(){	$IPT -F	$IPT -P INPUT ACCEPT	$IPT -P OUTPUT ACCEPT	$IPT -P FORWARD ACCEPT}fw_closeall(){	$IPT -F	$IPT -P INPUT DROP	$IPT -P OUTPUT DROP	$IPT -P FORWARD DROP	$IPT -A INPUT -i lo -j ACCEPT	$IPT -A OUTPUT -o lo -j ACCEPT}case "$1" in	'start')	   fw_up 	   ;;	'up')	   fw_up	   echo "Firewall: up"	   ;;	'stop')	   fw_openall	   ;;	'down')	   fw_openall	   echo "Firewall: down, all ports set to ACCEPT"	   ;;	'close')	   echo "Firewall: all ports dropped"	   fw_closeall	   ;;	'restart')	   fw_up	   ;;	*)	   echo "usage: `basename $0` up|down|close"	   ;;esac