All pastes #737170 Raw Edit
Anonymous

public text v1 · immutable
·published 2007-10-15 05:01 UTC
#!/bin/bash
echo "0" > /proc/sys/net/ipv4/conf/all/accept_source_route
echo "0" > /proc/sys/net/ipv4/conf/all/accept_redirects
/sbin/iptables -P INPUT DROP
/sbin/iptables -F INPUT
/sbin/iptables -P OUTPUT ACCEPT
/sbin/iptables -F OUTPUT
/sbin/iptables -P FORWARD ACCEPT
/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

#/sbin/iptables -A INPUT -p TCP -s 0/0 --dport 20 -j ACCEPT
/sbin/iptables -A INPUT -p ICMP  --icmp-type 8 -j ACCEPT
/sbin/iptables -A INPUT -p TCP -s 0/0 --dport 21 -j ACCEPT
/sbin/iptables -A INPUT -p TCP -s 0/0 --dport 22 -j ACCEPT
/sbin/iptables -A INPUT -p TCP -s 127.0.0.1  --dport 389 -j ACCEPT
/sbin/iptables -A INPUT -p TCP -s 127.0.0.1  --dport 3310 -j ACCEPT
/sbin/iptables -A INPUT -p TCP -s 127.0.0.1  --dport 783 -j ACCEPT
#/sbin/iptables -A INPUT -p TCP -s 0/0 --dport 22 -j REJECT
#v/sbin/iptables -A INPUT -p TCP -s 0/0 --dport 389 -j ACCEPT

/sbin/iptables -A INPUT -p TCP -s 0/0 --dport 25 -j ACCEPT
/sbin/iptables -A INPUT -p TCP -s 0/0 --dport 80 -j ACCEPT