rendered paste body#!/bin/sh
iptables -F
iptables -t nat -F
iptables -P INPUT DROP
iptables -P FORWARD ACCEPT
iptables -P OUTPUT ACCEPT
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -p igmp -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
# NTP
iptables -A INPUT -p udp --dport 123 -j ACCEPT -i eth0
# iptables -A OUTPUT -p udp --sport 123 -j ACCEPT par obligatoire dans ma config ?
# rsync
iptables -A INPUT -p tcp --dport 873 -j ACCEPT -i eth0
iptables -A INPUT -j REJECT
iptables -t nat -A POSTROUTING -o eth1 -j MASQUERADE