You are not logged in.

#1 2008-05-13 20:09:40

arch0r
Member
From: From the Chron-o-John
Registered: 2008-05-13
Posts: 597

iptables script

hi guys
after reading and studying several websites about iptables, i wrote my own one to protect me (my home machine and my server).
but i don't know whether it's good enough or whether i should change anything tongue

i would be pleased to get any hints how to improve it smile

http://pastebin.com/f3217c5d5

Offline

#2 2008-05-13 20:20:04

daf666
Member
Registered: 2007-04-08
Posts: 470
Website

Re: iptables script

looks really nice.. jesus.. what are you protecting a swiss bank? wink
anyways, you have lots of specific drop rules in input chain.. while input is drop by default.. so I am not sure its needed.
Also.. you can add more comments

Offline

#3 2008-05-13 20:29:08

wonder
Developer
From: Bucharest, Romania
Registered: 2006-07-05
Posts: 5,941
Website

Re: iptables script

i don't understand why you put all that DROP for different ports if the default policy for INPUT is DROP smile


Give what you have. To someone, it may be better than you dare to think.

Offline

Board footer

Powered by FluxBB