Arch Linux

arch0r

Member

From: From the Chron-o-John

Registered: 2008-05-13

Posts: 597

iptables script

hi guys
after reading and studying several websites about iptables, i wrote my own one to protect me (my home machine and my server).
but i don't know whether it's good enough or whether i should change anything

i would be pleased to get any hints how to improve it

http://pastebin.com/f3217c5d5

daf666

Member

Registered: 2007-04-08

Posts: 459

Re: iptables script

looks really nice.. jesus.. what are you protecting a swiss bank?
anyways, you have lots of specific drop rules in input chain.. while input is drop by default.. so I am not sure its needed.
Also.. you can add more comments

wonder

Developer

From: Bucharest, Romania

Registered: 2006-07-05

Posts: 5,937

Website

Re: iptables script

i don't understand why you put all that DROP for different ports if the default policy for INPUT is DROP

---

Give what you have. To someone, it may be better than you dare to think.
Blog