diff options
| author | Silvino <silvino@bk.ru> | 2021-02-25 23:22:17 +0000 |
|---|---|---|
| committer | Silvino <silvino@bk.ru> | 2021-02-25 23:22:17 +0000 |
| commit | d12b35a47b9a872ecb5e037f1c2b02e1ea8927fb (patch) | |
| tree | 8fdac6dfc8cabb9f85a2db3a3bd628cfe44438cd /linux/conf/iptables/ipt-open.sh | |
| parent | 0a6b0fc9769daf0932cb207c3285baa31547b489 (diff) | |
| parent | a3628fc49db4d88ff3e4067268650710d1da3f6f (diff) | |
| download | doc-d12b35a47b9a872ecb5e037f1c2b02e1ea8927fb.tar.gz | |
merge openbsd branch into develop
new directory layout
Diffstat (limited to 'linux/conf/iptables/ipt-open.sh')
| -rw-r--r-- | linux/conf/iptables/ipt-open.sh | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/linux/conf/iptables/ipt-open.sh b/linux/conf/iptables/ipt-open.sh new file mode 100644 index 0000000..be2b86b --- /dev/null +++ b/linux/conf/iptables/ipt-open.sh @@ -0,0 +1,17 @@ +#!/bin/bash + +## load client configuration +${IPT} -P INPUT DROP +${IPT} -P FORWARD DROP +${IPT} -P OUTPUT ACCEPT + +${IPT} -A INPUT -i lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT +${IPT} -A OUTPUT -o lo -s 127.0.0.0/8 -d 127.0.0.0/8 -j ACCEPT + +${IPT} -A INPUT -p tcp --dport 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT +${IPT} -A INPUT -p udp --dport 1024:65535 -m state --state ESTABLISHED,RELATED -j ACCEPT + +${IPT} -A OUTPUT -j ACCEPT + +${IPT} -A FORWARD -j LOG --log-level 7 --log-prefix "iptables: FORWARD: " +${IPT} -A INPUT -j LOG --log-level 7 --log-prefix "iptables: INPUT: " |