From b6cd05b56e464b8ef6f4b5c7f142408d0816c0a6 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marcin=20Wo=C5=BAniak?= Date: Mon, 9 Aug 2021 22:27:09 +0200 Subject: [PATCH] Added the ipconfig --- .config/iptables | 31 ++++++++++++++++--------------- 1 file changed, 16 insertions(+), 15 deletions(-) diff --git a/.config/iptables b/.config/iptables index 930c637..671a7df 100755 --- a/.config/iptables +++ b/.config/iptables @@ -1,22 +1,19 @@ # CONFIGURATION: +# Default configuration to DROP +iptables -P INPUT DROP +iptables -P FORWARD DROP +iptables -P OUTPUT DROP + # Accept on localhost -iptables -A INPUT -i lo -j ACCEPT -iptables -A OUTPUT -o lo -j ACCEPT +# iptables -A INPUT -i lo -j ACCEPT +# iptables -A OUTPUT -o lo -j ACCEPT # Accept outgoing network iptables -A OUTPUT -o eth0 -j ACCEPT -# Allow established sessions to receive traffic -iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT -iptables -A INPUT -m state --state NEW,ESTABLISHED -j ACCEPT - -# Enable SSH (to internet) -#iptables -A OUTPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -#iptables -A OUTPUT -p tcp -m state --state NEW -m tcp --dport 10571 -j ACCEPT - -# Disable SSH (to that machine) -iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --sport 22 -j DROP -iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 22 -j DROP +# Enable SSH (to that machine) +iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --sport 22 -j ACCEPT +iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 22 -j ACCEPT # Enable INZ #iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 1285 -j ACCEPT @@ -26,8 +23,12 @@ iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 2 #Enable CSGO iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 27015 -j ACCEPT iptables -A INPUT -p tcp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 27020 -j ACCEPT -iptables -A INPUT -p udp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 27015 -j ACCEPT -iptables -A INPUT -p udp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 27020 -j ACCEPT +#iptables -A INPUT -p udp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 27015 -j ACCEPT +#iptables -A INPUT -p udp -m state --state NEW -m tcp -s 192.168.0.0/24 --dport 27020 -j ACCEPT + +# Allow established sessions to receive traffic +iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT +# iptables -A INPUT -m state --state NEW,ESTABLISHED -j ACCEPT iptables -A INPUT -i eth0 -m state --state NEW,INVALID -j DROP iptables -A FORWARD -i eth0 -m state --state NEW,INVALID -j DROP