rendered paste body
# ------- sluzby povolene pre eth0 -------
iptables -A INPUT -i $ynet -p udp --sport 67:68 --dport 67:68 -j ACCEPT # dhcp
iptables -A INPUT -p TCP --destination-port 389 -j ACCEPT # LDAP vantova poziadavka
# 1
# iptables -A INPUT -p TCP --destination-port 80 -j ACCEPT # http - voyager
# iptables -A INPUT -p TCP --destination-port 443 -j ACCEPT # https - voyager
# iptables -A INPUT -p TCP --destination-port 6667 -j ACCEPT # irc - voyager
iptables -A INPUT -s horus.ynet.sk -p udp --dport 161 -j ACCEPT # SNMP pre nagios na horusovi
# iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 21 -j ACCEPT # ftp koli cstrike
iptables -A INPUT -p ICMP -j ACCEPT # Povoli dnu ICMP pakety
iptables -A INPUT -i $ynet -j ALLOWED
iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 636 -j ACCEPT # LDAPs
iptables -A INPUT -i $ynet -s horus.ynet.sk -m state --state NEW -p TCP --destination-port 389 -j ACCEPT # LDAP
iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 22 -j ACCEPT # ssh
# iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 21 -j ACCEPT # ftp
iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 9101 -j ACCEPT # bacula Dir
iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 9102 -j ACCEPT # bacula FD
iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 9103 -j ACCEPT # bacula SD
iptables -A INPUT -i $ynet -m state --state NEW -p TCP --destination-port 3632 -j ACCEPT # distcc
#2
iptables -A INPUT -j REJECT --reject-with icmp-port-unreachable