frodovdr/raspap-webgui
1
0
Fork 0
mirror of https://github.com/billz/raspap-webgui.git synced 2023-10-10 13:37:24 +02:00
Code Issues Releases Wiki Activity

Update iptables.rules

Browse Source
This commit is contained in:
Bill Zimmerman 2020-03-20 16:23:54 +01:00 committed by GitHub
parent 63dc8442ba
commit ac4f7be5bb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
installers/iptables.rules
View File

@ -1,4 +1,24 @@
# RaspAP iptables rules # RaspAP iptables rules
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
# loopback
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A INPUT -d 127.0.0.1 -j ACCEPT
-A OUTPUT -s 127.0.0.1 -j ACCEPT
# ACCEPT already ESTABLISHED connections
-A INPUT -p ALL -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
# ACCEPT all OUTPUT
-A OUTPUT -p ALL -o eth0 -j ACCEPT
# SSH
-A INPUT -p tcp -i eth0 --dport 22 -m state --state NEW -j ACCEPT
*nat *nat
:PREROUTING ACCEPT [0:0] :PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0] :INPUT ACCEPT [0:0]