rendered paste body#!/bin/bash# personal firewall# 2006 by b42, b42@centrum.cz## good luck if you're using thisIPT=$(which iptables)fw_up(){ $IPT -F $IPT -P INPUT DROP $IPT -P OUTPUT ACCEPT $IPT -P FORWARD DROP $IPT -A INPUT -i lo -j ACCEPT $IPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT #$IPT -A INPUT -p tcp --dport auth -j ACCEPT $IPT -A INPUT -p tcp --dport 22 -j ACCEPT $IPT -A INPUT -p icmp --icmp-type echo-request -j ACCEPT}fw_openall(){ $IPT -F $IPT -P INPUT ACCEPT $IPT -P OUTPUT ACCEPT $IPT -P FORWARD ACCEPT}fw_closeall(){ $IPT -F $IPT -P INPUT DROP $IPT -P OUTPUT DROP $IPT -P FORWARD DROP $IPT -A INPUT -i lo -j ACCEPT $IPT -A OUTPUT -o lo -j ACCEPT}case "$1" in 'start') fw_up ;; 'up') fw_up echo "Firewall: up" ;; 'stop') fw_openall ;; 'down') fw_openall echo "Firewall: down, all ports set to ACCEPT" ;; 'close') echo "Firewall: all ports dropped" fw_closeall ;; 'restart') fw_up ;; *) echo "usage: `basename $0` up|down|close" ;;esac