All pastes #951251 Raw Edit
Unnamed

public text v1 · immutable
·published 2008-03-21 05:11 UTC


########## Set iptables eth0 rules

# Set Jabber port private ip only
iptables -A INPUT -s 10.0.0.0/8 -i eth0 -p tcp --dport 5222 -j ACCEPT
iptables -A INPUT -s 127.0.0.0/8 -i eth0 -p tcp --dport 5222 -j ACCEPT
iptables -A INPUT -s 172.16.0.0/12 -i eth0 -p tcp --dport 5222 -j ACCEPT
iptables -A INPUT -s 192.168.0.0/16 -i eth0 -p tcp --dport 5222 -j ACCEPT
iptables -A INPUT -s 169.254.0.0/16 -i eth0 -p tcp --dport 5222 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 5222 -j DROP

# Set ftp port private ip only
iptables -A INPUT -s 10.0.0.0/8 -i eth0 -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -s 127.0.0.0/8 -i eth0 -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -s 172.16.0.0/12 -i eth0 -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -s 192.168.0.0/16 -i eth0 -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -s 169.254.0.0/16 -i eth0 -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 21 -j DROP

# Set apache port private ip only
iptables -A INPUT -s 10.0.0.0/8 -i eth0 -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -s 127.0.0.0/8 -i eth0 -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -s 172.16.0.0/12 -i eth0 -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -s 192.168.0.0/16 -i eth0 -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -s 169.254.0.0/16 -i eth0 -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 80 -j DROP

# Set telnet port private ip only Telnet is VERY insecure and should not be used over the internet
iptables -A INPUT -s 10.0.0.0/8 -i eth0 -p tcp --dport 23 -j ACCEPT
iptables -A INPUT -s 127.0.0.0/8 -i eth0 -p tcp --dport 23 -j ACCEPT
iptables -A INPUT -s 172.16.0.0/12 -i eth0 -p tcp --dport 23 -j ACCEPT
iptables -A INPUT -s 192.168.0.0/16 -i eth0 -p tcp --dport 23 -j ACCEPT
iptables -A INPUT -s 169.254.0.0/16 -i eth0 -p tcp --dport 23 -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport 23 -j DROP


# Allow openfire admin, just in case
iptables -A INPUT -p tcp --dport 9090 -j ACCEPT



########### Set iptables eth1 rules
iptables -A INPUT -i eth1 -p tcp --dport 22 -j DROP 	#ssh
iptables -A INPUT -i eth1 -p tcp --dport 5223 -j DROP 	#jabber ssl
iptables -A INPUT -i eth1 -p tcp --dport 443 -j DROP 	#https
iptables -A INPUT -i eth1 -p tcp --dport 9091 -j DROP 	#secure jabber admin


# Protect the SQL database
iptables -A INPUT -s ! 127.0.0.1/8 -p tcp --dport 3306 -j DROP