https://www.slackwiki.com/index.php?title=Buzzedlightyears_IPTables&action=history Revision history for this page on the wiki en MediaWiki 1.40.0 Wed, 08 Apr 2026 14:27:48 GMT https://www.slackwiki.com/index.php?title=Buzzedlightyears_IPTables&diff=92&oldid=prev https://www.slackwiki.com/index.php?title=Buzzedlightyears_IPTables&diff=92&oldid=prev <p>Copy from old</p> <p><b>New page</b></p><div> #!/bin/sh<br /> <br /> IPTABLES=/usr/sbin/iptables<br /> <br /> #Allow incoming returning requests (Port Scans, Pings)<br /> $IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED -i eth0 -p icmp<br /> $IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED -i eth0 -p tcp<br /> $IPTABLES -A INPUT -j ACCEPT -m state --state ESTABLISHED -i eth0 -p udp<br /> <br /> #Allow incoming FTP Connections<br /> $IPTABLES -A INPUT -p tcp --dport 20 -j ACCEPT<br /> $IPTABLES -A INPUT -p tcp --dport 21 -j ACCEPT<br /> <br /> #Allow new incoming SSH connections<br /> #$IPTABLES -A INPUT -p tcp --dport 22 -m state --state new -j ACCEPT<br /> <br /> #Webserver<br /> #$IPTABLES -A INPUT -p tcp --dport 80 -j ACCEPT<br /> <br /> #Allow Pings<br /> $IPTABLES -A INPUT -p icmp -j ACCEPT<br /> <br /> #Allow All Local Host<br /> $IPTABLES -A INPUT -i lo -j ACCEPT<br /> <br /> #Drop all other and LOG to /var/log/firewall<br /> $IPTABLES -A INPUT -m limit --limit 3/s --limit-burst 5 -i eth0 -j LOG<br /> #$IPTABLES -A INPUT -i eth0 -j DROP<br /> <br /> $IPTABLES -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST,ACK SYN -m limit --limit 1/sec -j ACCEPT<br /> $IPTABLES -A FORWARD -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT<br /> $IPTABLES -A FORWARD -m state --state NEW,RELATED,ESTABLISHED,UNTRACKED -j DROP<br /> $IPTABLES -A INPUT -j DROP<br /> $IPTABLES -A INPUT -p igmp -j DROP<br /> <br /> [[Category:Security]]</div> Tue, 02 Jun 2009 03:32:51 GMT Erik https://www.slackwiki.com/Talk:Buzzedlightyears_IPTables