Re: minimal iptables ruleset for laptop

["Volkm@r" <plsdontreply@arcor.de>]

Georgi Alexandrov wrote:
> something like this:
> 
> ######################### start ###########################
> 
> iptables -F
> iptables -X
> iptables -Z
> iptables -t nat -F
> iptables -t nat -X
> iptables -t nat -Z
> iptables -t mangle -F
> iptables -t mangle -X
> iptables -t mangle -Z
> 
> iptables -P INPUT DROP
> iptables -P FORWARD DROP
> iptables -P OUTPUT ACCEPT
> 
> iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
> iptables -A INPUT -i lo -j ACCEPT
> iptables -A INPUT -p icmp --icmp-type 3 -j ACCEPT
> iptables -A INPUT -p icmp --icmp-type 11 -j ACCEPT
> iptables -A INPUT -p icmp --icmp-type 12 -j ACCEPT
> iptables -A INPUT -p tcp --syn --dport 113 -j REJECT --reject-with tcp-reset
> 
> ############################# end #################################
> 
> I think the above ruleset is sufficient. If you have any questions about
> it - just ask.
> 
> regards,
> Georgi Alexandrov
> 
> 

Hi Georgi,
Thanks a lot for your fast response. Now it looks much easier to
understand. Now I have two more questions.

1. What is the advantage of putting those "-p icmp" rules?
2. How could I add logging (fore some time, to see what's going on)?

Thanks again
Volkm@r