From 21ae7bed83d64a5d39807b0afa4568fb92eb633a Mon Sep 17 00:00:00 2001 From: EUcancER Date: Fri, 5 Oct 2012 02:14:07 +0200 Subject: add iptables rules file --- infest/skel/etc/iptables/rules.v4 | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 infest/skel/etc/iptables/rules.v4 (limited to 'infest') diff --git a/infest/skel/etc/iptables/rules.v4 b/infest/skel/etc/iptables/rules.v4 new file mode 100644 index 00000000..cda4b903 --- /dev/null +++ b/infest/skel/etc/iptables/rules.v4 @@ -0,0 +1,28 @@ +# Sane IPTABLES Rules, retiolum-permissive, world-enforcing +*nat +:PREROUTING ACCEPT [262534:163260473] +:POSTROUTING ACCEPT [5060049:305386323] +:OUTPUT ACCEPT [5060049:305386323] +COMMIT + +*mangle +:PREROUTING ACCEPT [41358433:26228470872] +:INPUT ACCEPT [41358389:26228463060] +:FORWARD ACCEPT [0:0] +:OUTPUT ACCEPT [37015162:23438396300] +:POSTROUTING ACCEPT [37015162:23438396300] +COMMIT + +*filter +:INPUT DROP [9:3336] +:FORWARD DROP [0:0] +:OUTPUT ACCEPT [821:311282] +-A INPUT -i lo -j ACCEPT +-A INPUT -i retiolum -j ACCEPT +-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT +-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT +-A INPUT -p tcp -m tcp --dport 655 -j ACCEPT +COMMIT -- cgit v1.2.3