diff options
| author | Silvino Silva <silvino@bk.ru> | 2020-04-20 01:03:12 +0100 |
|---|---|---|
| committer | Silvino Silva <silvino@bk.ru> | 2020-04-20 01:03:12 +0100 |
| commit | 6ca80c0a296cb44bc2b335211df86e8a95383cdf (patch) | |
| tree | 809ca0fc2eee0353d7040539310605d0e113b3d7 /core/conf/iptables/ipt-open.sh | |
| parent | fd186246f96768b8398f0ffe32ef136cb895fa21 (diff) | |
| parent | 5eec098c537ed98f76af59c37a54cb45645cc2a6 (diff) | |
| download | doc-6ca80c0a296cb44bc2b335211df86e8a95383cdf.tar.gz | |
Merge branch 'master' into develop
Diffstat (limited to 'core/conf/iptables/ipt-open.sh')
| -rw-r--r-- | core/conf/iptables/ipt-open.sh | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/core/conf/iptables/ipt-open.sh b/core/conf/iptables/ipt-open.sh new file mode 100644 index 0000000..be2b86b --- /dev/null +++ b/core/conf/iptables/ipt-open.sh @@ -0,0 +1,17 @@ +#!/bin/bash + +## load client configuration +${IPT} -P INPUT DROP +${IPT} -P FORWARD DROP +${IPT} -P OUTPUT ACCEPT + +${IPT} -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT +${IPT} -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + +${IPT} -A INPUT -p tcp --dport 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT +${IPT} -A INPUT -p udp --dport 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT + +${IPT} -A OUTPUT -j ACCEPT + +${IPT} -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " +${IPT} -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " |