Administrace komentářů

# Generated by iptables-save v1.2.11 on Tue Jul  8 12:54:24 2008
*filter
:INPUT DROP [2677:661822]
:FORWARD DROP [0:0]
:OUTPUT DROP [7:43884]
:IN_FW - [0:0]
:logdrop - [0:0]
-A INPUT -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j DROP 
-A INPUT -i eth0 -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -m limit --limit 10/min -j LOG --log-prefix "bogus packet: " 
-A INPUT -i eth0 -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -j DROP 
-A INPUT -i eth0 -j IN_FW 
-A INPUT -i eth0 -p tcp -m tcp --dport 21 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 25 -j ACCEPT 
-A INPUT -i eth0 -p udp -m udp --dport 53 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 53 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 110 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 143 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 443 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 873 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 10000 -j ACCEPT 
-A INPUT -i eth0 -p tcp -m tcp --dport 113 -m limit --limit 12/hour -j LOG 
-A INPUT -i eth0 -p tcp -m tcp --dport 113 -j REJECT --reject-with tcp-reset 
-A INPUT -i eth0 -p icmp -m icmp --icmp-type 8 -j ACCEPT 
-A INPUT -i lo -j ACCEPT 
-A INPUT -d 192.168.1.25 -i eth1 -j ACCEPT 
-A INPUT -d 192.168.115.175 -i eth1 -j ACCEPT 
-A INPUT -d 192.168.1.255 -i eth1 -j ACCEPT 
-A INPUT -i eth1 -p udp -m udp --dport 67 -j ACCEPT 
-A INPUT -d 192.168.115.175 -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -m limit --limit 12/hour -j LOG --log-prefix "INPUT drop: " 
-A FORWARD -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j DROP 
-A FORWARD -i eth0 -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -m limit --limit 10/min -j LOG --log-prefix "bogus packet: " 
-A FORWARD -i eth0 -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -j DROP 
-A FORWARD -i eth0 -j IN_FW 
-A FORWARD -d 192.168.1.2 -i eth0 -o eth1 -p tcp -m tcp --dport 22 -j ACCEPT 
-A FORWARD -i eth1 -j ACCEPT 
-A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j ACCEPT 
-A FORWARD -m limit --limit 12/hour -j LOG --log-prefix "forward drop: " 
-A OUTPUT -s 127.0.0.1 -j ACCEPT 
-A OUTPUT -s 192.168.1.25 -j ACCEPT 
-A OUTPUT -s 192.168.115.175 -j ACCEPT 
-A OUTPUT -o eth1 -p udp -m udp --sport 67 --dport 68 -j ACCEPT 
-A OUTPUT -j LOG --log-prefix "OUTPUT drop: " 
-A logdrop -m limit --limit 5/hour --limit-burst 3 -j LOG --log-prefix "Rezervovana adresa: " 
-A logdrop -j DROP 
COMMIT
# Completed on Tue Jul  8 12:54:24 2008