iotcat
/
ushio-docker
mirror of https://github.com/IoTcat/ushio-docker.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

iptables

Browse Source
master
usa.yimian.xyz 4 years ago
parent 1746484530
commit 50798cc477
1 changed files with 4 additions and 3 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 7
      usa.yimian.xyz/iptables.sh

7
usa.yimian.xyz/iptables.sh
Unescape View File

@ -16,10 +16,11 @@ iptables -A INPUT -p tcp --dport 22 -j ACCEPT
#iptables -A FORWARD -p tcp --dport 4443 -j ACCEPT
#iptables -A FORWARD -p tcp --dport 4400:4440 -j ACCEPT
# dns
iptables -A INPUT -p tcp --sport 53 -j ACCEPT
iptables -A INPUT -p udp --sport 53 -j ACCEPT
#iptables -A INPUT -p tcp --sport 53 -j ACCEPT
#iptables -A INPUT -p udp --sport 53 -j ACCEPT
# for established service
iptables -A INPUT -p tcp -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p udp -m state --state RELATED,ESTABLISHED -j ACCEPT
# icmp ping
iptables -A INPUT -p icmp -j ACCEPT
# dns lookup
@ -30,7 +31,7 @@ iptables -A OUTPUT -p tcp --sport 31337 -j DROP
iptables -A OUTPUT -p tcp --dport 31337 -j DROP
# anti ddos
#iptables -A FORWARD -f -m limit --limit 100/s --limit-burst 100 -j ACCEPT
#iptables -A FORWARD -p icmp -m limit --limit 1/s --limit-burst 10 -j ACCEPT
iptables -A INPUT -p icmp -m limit --limit 1/s --limit-burst 10 -j ACCEPT
# end
#iptables -A FORWARD -j DROP
# save

Write Preview
Loading…
Cancel
Save