add firewall rulesets for catsith.asininetech.net
This commit is contained in:
staticsafe
parent
8b77463939
commit
ee1e6fb76f
|
|
@ -0,0 +1,55 @@
|
|||
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
|
||||
*filter
|
||||
:INPUT DROP [1971:93740]
|
||||
:FORWARD DROP [0:0]
|
||||
:OUTPUT DROP [55632:4190069]
|
||||
-A INPUT -s 64.62.202.71/32 -j DROP
|
||||
-A INPUT -s 173.244.135.0/24 -m comment --comment "infegy data collection" -j DROP
|
||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
|
||||
-A INPUT -p tcp -m multiport --dports 80,443 -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 5665 -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT
|
||||
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A OUTPUT -o lo -j ACCEPT
|
||||
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m multiport --dports 80,443 -j ACCEPT
|
||||
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 53 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 587 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 5665 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:14 2019
|
||||
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
|
||||
*mangle
|
||||
:PREROUTING ACCEPT [1436823:274632683]
|
||||
:INPUT ACCEPT [1436823:274632683]
|
||||
:FORWARD ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [991155:4677392300]
|
||||
:POSTROUTING ACCEPT [935523:4673202231]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:14 2019
|
||||
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
|
||||
*nat
|
||||
:PREROUTING ACCEPT [5075:277850]
|
||||
:INPUT ACCEPT [3428:197268]
|
||||
:OUTPUT ACCEPT [79147:5741156]
|
||||
:POSTROUTING ACCEPT [24500:1591632]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:14 2019
|
||||
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
|
||||
*raw
|
||||
:PREROUTING ACCEPT [1436823:274632683]
|
||||
:OUTPUT ACCEPT [991155:4677392300]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:14 2019
|
||||
# Generated by iptables-save v1.6.1 on Thu Aug 22 02:22:14 2019
|
||||
*security
|
||||
:INPUT ACCEPT [1434852:274538943]
|
||||
:FORWARD ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [935523:4673202231]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:14 2019
|
||||
|
|
@ -0,0 +1,62 @@
|
|||
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
|
||||
*nat
|
||||
:PREROUTING ACCEPT [39130:3552329]
|
||||
:INPUT ACCEPT [38219:3476328]
|
||||
:OUTPUT ACCEPT [649972:61144068]
|
||||
:POSTROUTING ACCEPT [166603:14761332]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:34 2019
|
||||
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
|
||||
*security
|
||||
:INPUT ACCEPT [3063254:3242714018]
|
||||
:FORWARD ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [2710431:1187736120]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:34 2019
|
||||
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
|
||||
*raw
|
||||
:PREROUTING ACCEPT [3069715:3243124325]
|
||||
:OUTPUT ACCEPT [3197462:1234338936]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:34 2019
|
||||
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
|
||||
*mangle
|
||||
:PREROUTING ACCEPT [3069715:3243124325]
|
||||
:INPUT ACCEPT [3069675:3243120621]
|
||||
:FORWARD ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [3197463:1234339228]
|
||||
:POSTROUTING ACCEPT [2710434:1187736892]
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:34 2019
|
||||
# Generated by ip6tables-save v1.6.1 on Thu Aug 22 02:22:34 2019
|
||||
*filter
|
||||
:INPUT DROP [6421:406603]
|
||||
:FORWARD DROP [0:0]
|
||||
:OUTPUT DROP [487029:46602336]
|
||||
:icmp_in - [0:0]
|
||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
|
||||
-A INPUT -p tcp -m multiport --dports 80,443 -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 5665 -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 4949 -j ACCEPT
|
||||
-A INPUT -p ipv6-icmp -j icmp_in
|
||||
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A OUTPUT -o lo -j ACCEPT
|
||||
-A OUTPUT -p tcp -m multiport --dports 80,443 -j ACCEPT
|
||||
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 53 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 587 -j ACCEPT
|
||||
-A OUTPUT -p ipv6-icmp -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 5665 -j ACCEPT
|
||||
-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 128 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 4 -j ACCEPT
|
||||
COMMIT
|
||||
# Completed on Thu Aug 22 02:22:34 2019
|
||||
Loading…
Reference in New Issue