RE: Single IP firewall help...

["Brad Morgan" <B-Morgan@concentric.net>]

Don't forget to change the default policy on INPUT to be DROP.

-----Original Message-----
From: netfilter-admin@lists.netfilter.org
[mailto:netfilter-admin@lists.netfilter.org]On Behalf Of Steve Mickeler
Sent: Thursday, September 12, 2002 10:32 AM
To: Chris Poupart
Cc: netfilter@lists.netfilter.org
Subject: Re: Single IP firewall help...



This should work for you.


$IPTABLES -A INPUT -d 192.168.0.10 -p tcp --dport 22 -j ACCEPT
$IPTABLES -A INPUT -d 192.168.0.10 -p tcp --dport 80 -j ACCEPT
$IPTABLES -A INPUT -d 192.168.0.10 -p tcp --dport 443 -j ACCEPT
$IPTABLES -A INPUT -d 192.168.0.10 -p tcp --syn -j REJECT
$IPTABLES -A INPUT -d 192.168.0.10 -p udp -j REJECT


> Hello,
>
> I have been having a heck of a time getting a IPTables firewall working
> (directly) on our future webserver.
>
> Essentially, it should be easy, I want to accept SSH, HTTP and HTTPS and
> deny everything else (incoming) and, at least for the moment, allow all
> outgoing.
>
> I am sure that this can be done in about 4 lines, and yet all that I
> have tried has ended in me getting locked out (and having to go to the
> console).  So I am stuck, and I have to have this ready to go live by
> friday.
>
> Assuming that the IP address was (we will give a nice private one)
> 192.168.0.10 does anyone have any ideas?
>
> Thanks for any help that you guys can offer on this.
>
> -- Chris Poupart
>
>



[-] Steve Mickeler [ steve@neptune.ca ]

[|] Todays root password is brought to you by /dev/random

[+] 1024D/9AA80CDF = 4103 9E35 2713 D432 924F  3C2E A7B9 A0FE 9AA8 0CDF