Created
February 25, 2024 22:01
-
-
Save fcaldarelli/a0530b675b722ce142f86c4b928456f8 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Generated by iptables-save v1.8.9 (nf_tables) on Fri Feb 16 19:53:48 2024 | |
*filter | |
:INPUT DROP [0:0] | |
:FORWARD DROP [0:0] | |
:OUTPUT DROP [0:0] | |
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT | |
-A INPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j REJECT --reject-with tcp-reset | |
-A INPUT -m state --state INVALID -j DROP | |
-A INPUT -i lo -j ACCEPT | |
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT | |
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT | |
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT | |
-A INPUT -p icmp -m icmp --icmp-type 8/0 -j ACCEPT | |
-A INPUT -j DROP | |
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT | |
-A FORWARD -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j REJECT --reject-with tcp-reset | |
-A FORWARD -m state --state INVALID -j DROP | |
-A FORWARD -i lo -o lo -j ACCEPT | |
-A FORWARD -j DROP | |
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT | |
-A OUTPUT -p tcp -m tcp ! --tcp-flags FIN,SYN,RST,ACK SYN -m state --state NEW -j REJECT --reject-with tcp-reset | |
-A OUTPUT -m state --state INVALID -j DROP | |
-A OUTPUT -o lo -j ACCEPT | |
-A OUTPUT -j ACCEPT | |
COMMIT | |
# Completed on Fri Feb 16 19:53:48 2024 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment