rendered paste body# Set IPTABLES rules, allow only private addressesiptables -A INPUT -s 10.0.0.0/8 -j ACCEPTiptables -A INPUT -s 44.0.0.0/8 -j ACCEPTiptables -A INPUT -s 192.168.0.0/16 -j ACCEPTiptables -A INPUT -s 169.254.0.0/16 -j ACCEPT ## Rule exceptions # Allow remote ssh only on eth0 iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT # Allow jabber server connections iptables -A INPUT -i eth0 -p tcp --dport 9625 -j ACCEPT # Allow openfire admin port iptables -A INPUT -p tcp --dport 9090 -j ACCEPT # Drop all other addresses iptables -A INPUT -s 0/0 -j DROP# Set iptables eth1 rulesiptables -A INPUT -i eth1 -p tcp --dport 22 -j DROPiptables -A INPUT -i eth1 -p tcp --dport 5223 -j DROPiptables -A INPUT -i eth1 -p tcp --dport 443 -j DROPiptables -A INPUT -i eth1 -p tcp --dport 9091 -j DROP# Protect the SQL databaseiptables -A INPUT -p tcp --dport 3306 -j DROP