Changes between Initial Version and Version 1 of iptables

Timestamp:

04/15/15 13:31:17 (9 years ago)

Author:

sky

Comment:

--

iptables

@@ +1 @@
+= iptables & Firewall rules =
+
+CentOS系统默认路径: /etc/sysconfig/iptables
+
+Debian自定义路径: /etc/iptables.rule
+
+{{{
+# Generated by iptables-save v1.4.8 on Thu May  8 09:32:08 2014
+*filter
+:INPUT DROP [1515:291592]
+:FORWARD ACCEPT [0:0]
+:OUTPUT ACCEPT [3146:251073]
+-A INPUT -i lo -j ACCEPT
+-A INPUT -i ppp+ -j ACCEPT
+-A INPUT -i tun+ -j ACCEPT
+-A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT
+-A INPUT -i eth0 -p tcp -m tcp --dport 443 -j ACCEPT
+-A INPUT -i eth0 -p tcp -m tcp --dport 993 -j ACCEPT
+-A INPUT -i eth0 -p udp -m udp --dport 500 -j ACCEPT
+-A INPUT -i eth0 -p udp -m udp --dport 1701 -j ACCEPT
+-A INPUT -i eth0 -p udp -m udp --dport 4500 -j ACCEPT
+-A INPUT -p icmp -m limit --limit 1/sec -j ACCEPT
+-A INPUT -p tcp -m tcp --dport 22 -m recent --rcheck --seconds 60 --hitcount 6 --name SSH --rsource -j LOG --log-prefix "SH "
+-A INPUT -p tcp -m tcp --dport 22 -m recent --update --seconds 60 --hitcount 6 --name SSH --rsource -j DROP
+-A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -m recent --set --name SSH --rsource -j ACCEPT
+-A INPUT -i eth0 -m state --state RELATED,ESTABLISHED -j ACCEPT
+COMMIT
+# Completed on Thu May  8 09:32:08 2014
+}}}
+
+