diff options
| author | makefu <github@syntax-fehler.de> | 2012-10-31 22:26:20 +0100 |
|---|---|---|
| committer | makefu <github@syntax-fehler.de> | 2012-10-31 22:26:20 +0100 |
| commit | a47c0c10a7ce5905d7488e5658d201ba7e9f429b (patch) | |
| tree | baebf7de6109a0f11434243eb69b93f3d642f065 /infest | |
| parent | 0b9e1cce24cb4a77b5bd1798fa05f3adb037ade8 (diff) | |
| parent | 39ab689b7f92cfb3d03f7b1aa4a428cd08fcb91c (diff) | |
Merge branch 'master' of github.com:krebscode/painload
Diffstat (limited to 'infest')
| -rw-r--r-- | infest/skel/etc/iptables/rules.v4 | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/infest/skel/etc/iptables/rules.v4 b/infest/skel/etc/iptables/rules.v4 new file mode 100644 index 00000000..cda4b903 --- /dev/null +++ b/infest/skel/etc/iptables/rules.v4 @@ -0,0 +1,28 @@ +# Sane IPTABLES Rules, retiolum-permissive, world-enforcing +*nat +:PREROUTING ACCEPT [262534:163260473] +:POSTROUTING ACCEPT [5060049:305386323] +:OUTPUT ACCEPT [5060049:305386323] +COMMIT + +*mangle +:PREROUTING ACCEPT [41358433:26228470872] +:INPUT ACCEPT [41358389:26228463060] +:FORWARD ACCEPT [0:0] +:OUTPUT ACCEPT [37015162:23438396300] +:POSTROUTING ACCEPT [37015162:23438396300] +COMMIT + +*filter +:INPUT DROP [9:3336] +:FORWARD DROP [0:0] +:OUTPUT ACCEPT [821:311282] +-A INPUT -i lo -j ACCEPT +-A INPUT -i retiolum -j ACCEPT +-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT +-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 655 -j ACCEPT +COMMIT |