Added iptables helper script

This commit is contained in:
Wade Alcorn
2012-01-13 22:18:42 +10:00
parent 0f43ba6036
commit 2b8d9c393f

22
test/scripts/iptables.sh Normal file
View File

@@ -0,0 +1,22 @@
#!/bin/sh
# Delete all existing rules
/sbin/iptables -F
/sbin/iptables -X
# Set default chain policies
/sbin/iptables -P INPUT DROP
/sbin/iptables -P FORWARD DROP
/sbin/iptables -P OUTPUT ACCEPT
# Allow unlimited traffic on loopback
/sbin/iptables -A INPUT -i lo -j ACCEPT
/sbin/iptables -A OUTPUT -o lo -j ACCEPT
# Allow incoming SSH
/sbin/iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
/sbin/iptables -A OUTPUT -o eth0 -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
# Allow established connections
/sbin/iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT