From: ludi <myhapwcforever@gmail.com>
To: netfilter@lists.netfilter.org
Subject: Re: Trying to restore to default script
Date: Thu, 9 Feb 2006 15:07:57 +0800 [thread overview]
Message-ID: <d27cd2010602082307y65089d17g@mail.gmail.com> (raw)
In-Reply-To: <20060208111219.89137.qmail@web36103.mail.mud.yahoo.com>
#!/bin/sh
HOME_ADDR=
iptables -F OUTPUT
iptables -F INPUT
iptables -F FORWARD
#INPUT CHAIN :ACCESS SSH ,DROP ALL
iptables -A INPUT -p udp -i eth0 -s 0/0 -d $HOME_ADDR --dport 53 -j ACCEPT
iptables -A INPUT -p tcp -i eth0 -s 0/0 -d $HOME_ADDR --dport 22 -j ACCEPT
iptables -A INPUT -p udp -i eth0 -s 0/0 -d $HOME_ADDR --sport 53 -j ACCEPT
iptables -A INPUT -p tcp -i eth0 -s 0/0 -d $HOME_ADDR --dport 80 -j ACCEPT
iptables -A INPUT -p icmp -i eth0 -s 0/0 -d $HOME_ADDR -m limit
--limit 6/m --limit-burst 6 -j ACCEPT
iptables -A INPUT -i lo -s 0/0 -d 127.0.0.1/32 -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -P INPUT DROP
iptables -A OUTPUT -o lo -s 127.0.0.1 -j ACCEPT
iptables -A OUTPUT -o eth0 -s $HOME_ADDR -j ACCEPT
iptables -P OUTPUT DROP
I use the script file to execute iptables.And , I dont know it is your want.:(
next prev parent reply other threads:[~2006-02-09 7:07 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <d27cd2010602071827v16fe402ai@mail.gmail.com>
[not found] ` <20060208035617.49939.qmail@web36111.mail.mud.yahoo.com>
2006-02-08 6:10 ` Trying to restore to default script ludi
[not found] ` <20060208111219.89137.qmail@web36103.mail.mud.yahoo.com>
2006-02-09 7:07 ` ludi [this message]
2006-02-09 8:58 ` Rob Sterenborg
2006-02-09 9:59 ` ludi
2006-02-07 23:57 Bill L
2006-02-09 12:38 ` /dev/rob0
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=d27cd2010602082307y65089d17g@mail.gmail.com \
--to=myhapwcforever@gmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.