All pastes #443620 Raw Edit

Something

public text v1 · immutable
·published 2007-04-16 22:02 UTC
rendered paste body
iptables -F
iptables -X

iptables -t nat -F
iptables -t nat -X

iptables -t mangle -F
iptables -t mangle -X

iptables -N IN_ssh
iptables -A IN_ssh -s 10.1.1.19 -j ACCEPT


iptables -P INPUT ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
iptables -A INPUT -p icmp --icmp-type echo-reply -j ACCEPT

iptables -A INPUT -p tcp --dport 22 -j IN_ssh

iptables -A INPUT -j LOG --log-prefix last_drop:
iptables -A INPUT -j DROP

#iptables -A INPUT -j LOG
#iptables -A INPUT -j DROP

iptables -N OUT_dns
iptables -A OUT_dns -j LOG
iptables -A OUT_dns -j ACCEPT

iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT
iptables -A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
iptables -P OUTPUT DROP

iptables -A OUTPUT -p udp --dport 53 -j OUT_dns