All of lore.kernel.org
 help / color / mirror / Atom feed
From: "ThE PhP_KiD" <gregoriandres@yahoo.com.ar>
To: lartc@vger.kernel.org
Subject: [LARTC] RE: firewall
Date: Wed, 10 Sep 2003 13:09:33 +0000	[thread overview]
Message-ID: <marc-lartc-106319926706605@msgid-missing> (raw)


I forget next data:

Kernel 2.4.20
iptables 1.2.8
iproute (last stable)

RH72

:-)

->
-> Hi.
->
-> I'm trying to enable a firewall on my linux router.
->
-> eth0 router: Internet Connection
-> eth1 router: LAN connection
->
-> I want allow to my LAN users: browse web pages,
-> and send and recieve email, and nothing more, because
-> this router is connected to a VSAT connection, and
-> upload bandwidth is very small.
->
-> Also, I need to manage Linux router from a Internet
-> host via ssh and ftp.
->
-> Is ok next configuracion ?
->
-> Thank you very much.
-> ... mac
->
->
-> iptables -A OUTPUT -p tcp --dport 80 -o eth0 -j ACCEPT
-> iptables -A OUTPUT -p tcp --dport 25 -o eth0 -j ACCEPT
-> iptables -A OUTPUT -p tcp --dport 110 -o eth0 -j ACCEPT
-> iptables -A OUTPUT -p tcp --dport 22 -o eth0 -j ACCEPT
-> iptables -A OUTPUT -p tcp --dport 21 -o eth0 -j ACCEPT
-> iptables -A OUTPUT -p tcp --dport 20 -o eth0 -j ACCEPT
-> iptables -A OUTPUT -p tcp --dport 53 -o eth0 -j ACCEPT
-> iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
->
->
-> # Protección contra Syn-flood (inundación mediante Syn):
-> iptables -A OUTPUT -p tcp --syn -m limit --limit 1/s -j ACCEPT
->
-> #Furtivo buscando puertos (port scanner):
-> iptables -A OUTPUT -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m
-> limit --limit 1/s -j ACCEPT
->
-> #Ping de la muerte:
-> iptables -A OUTPUT -p icmp --icmp-type echo-request -m limit
-> --limit 1/s -j ACCEPT
->
->
-> # iptables -A OUTPUT -m state --state NEW -i ! ppp0 -j ACCEPT
-> iptables -A OUTPUT -j DROP
->

_______________________________________________
LARTC mailing list / LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/mailman/listinfo/lartc HOWTO: http://lartc.org/

             reply	other threads:[~2003-09-10 13:09 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2003-09-10 13:09 ThE PhP_KiD [this message]
2003-09-10 17:28 ` [LARTC] RE: firewall Stef Coene
2003-09-10 18:04 ` Daniel Chemko

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=marc-lartc-106319926706605@msgid-missing \
    --to=gregoriandres@yahoo.com.ar \
    --cc=lartc@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.