Segue um firewall bacana! Também tem sempre a versão atualizada no meu site ok? http://paginas.terra.com.br/educacao/chemonz. Falou.

• Download rc.firewall
• Enviar nova versão

Esconder código-fonte

#######       Firewall escrito por Ch3m0nZ       #############
###########      versão junho de 2006        #################
###########      chemonz@linuxmail.org       #################
##############################################################

##################### PARTE 1 #####################
#Limpando regras e politicas.
iptables -F
iptables -X

#Negando todo trafico de pacotes.
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT

#Barrando SSH (porta 4632)
#iptables -A INPUT -p TCP --dport 4632 -j DROP

#Barrando Time
iptables -A INPUT -p TCP --dport 113 -j DROP

#Barrando Auth
iptables -A INPUT -p TCP --dport 37 -j DROP

#Barrando VNC
iptables -A INPUT -p TCP --dport 5901 -j DROP

#Barrando X11
iptables -A INPUT -p TCP --dport 6000 -j DROP
iptables -A INPUT -p TCP --dport 6001 -j DROP

##################### PARTE 2 #####################

#liberando tráfego de rede local (127.0.0.1)
iptables -A INPUT -i lo -j ACCEPT
#iptables -A OUTPUT -o lo -j ACCEPT


#Liberando nessus
#iptables -A INPUT -p tcp --destination-port 1241 -j ACCEPT


#Liberando socks
iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 1080:1080 -m state --state NEW -j ACCEPT

#Liberando SSH (porta 4632)
iptables -A INPUT -p tcp --destination-port 4632 -j ACCEPT

#Abrindo interface lo
iptables -A INPUT -p tcp --syn -s 127.0.0.1/255.0.0.0 -j ACCEPT

#Liberando pacotes que realmente devem estabelecer conexão.
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT

#Liberar Apache na porta 8080
iptables -A INPUT -p tcp --destination-port 8080 -j ACCEPT
#iptables -A FORWARD -j ACCEPT -p tcp --dport 8080

#Liberar acesso http (www)
iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 80:80 -m state --state NEW -j ACCEPT
iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 8080:8080 -m state --state NEW -j ACCEPT

#Liberando MSN
iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 1863:1863 -m state --state NEW -j ACCEPT

#Liberando ping externo local p internet
#iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT

#Liberando conexão (P2P Gnutela)
iptables -A OUTPUT -p tcp --sport 0:65535 --dport 6346:6346 -m state --state NEW -j ACCEPT

#Liberando conexão (P2P aMule)
iptables -A INPUT -p tcp --destination-port 4662 -j ACCEPT
iptables -A FORWARD -j ACCEPT -p tcp --dport 4672

#Liberando Azureus
iptables -A INPUT -p tcp --destination-port 6881 -j ACCEPT
iptables -A FORWARD -j ACCEPT -p tcp --dport 6881


#################### fim do firewall ####################

Mpeg 2 Converter

Instalação completa de servidor de e-mail

Backup bases de dados Firebird com envio via FTP e local

POSTFIX AUTOMÁTICO COM MYSQL E IPTABLES - ATUALIZANDO QUOTA

Script de Instalação de Layer7 no CentOS 6.0

Nenhum comentário foi encontrado.