Login Registration

Network address

13 May 2023, by Goodman. Last update at 29 July 2024

network

Dedicated addresses

Services port list

Iptables rule example

#!/bin/sh
IPT="/sbin/iptables"

$IPT -F
$IPT -X

$IPT -P INPUT DROP
$IPT -P FORWARD DROP
$IPT -P OUTPUT DROP

TCP_PORTS="20,21,1024:65535"
$IPT -A INPUT -i lo -j ACCEPT
$IPT -A OUTPUT -o lo -j ACCEPT


$IPT -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPT -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

$IPT -A INPUT -p tcp --dport 22 -j ACCEPT
#$IPT -A INPUT -p tcp -m multiport --dport $TCP_PORTS -j ACCEPT
$IPT -A INPUT -p tcp -s 192.168.0.0/24 -m multiport --dport $TCP_PORTS -j ACCEPT
$IPT -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
$IPT -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
$IPT -A INPUT -p udp -s 192.168.0.0/24 -m multiport --dport $TCP_PORTS -j ACCEPT
#$IPT -A FORWARD -i eth1 -o eth0 -s 192.168.15.0/24 -m conntrack --ctstate NEW -j ACCEPT
#$IPT -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
#$IPT -A POSTROUTING -t nat -j MASQUERADE