Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon. Entire thread

Could someone explain IPTABLES

Name: Anonymous 2010-11-09 8:08

What the hell does the following commands do? How bad am I fucking myself?

sudo iptables -F
sudo iptables -P INPUT DROP
sudo iptables -P FORWARD DROP
sudo iptables -P OUTPUT ACCEPT
sudo iptables -A INPUT -p tcp --dport ssh -j ACCEPT
sudo iptables -A INPUT -p tcp --dport http -j ACCEPT
sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
sudo iptables -I INPUT 5 -m limit --limit 5/min -j LOG --log-prefix "iptables denied: " --log-level 7
sudo iptables-save > iptables.conf

Name: Anonymous 2010-11-11 1:28

Looks like it starts by clearing everything existing out and then allowing incoming connections on ssh and http and then outputting to a log file... I haven't screwed with this in ages but it's not anything really strange by any stretch

Name: Anonymous 2010-11-20 16:31

how about you RTFM and see what it does?

Name: Anonymous 2010-11-20 18:20

>>3
Back to /g/, please.

Name: How to shopping online?? 2010-12-01 13:32

How to shopping online??
I want to shopping the [url=http://www.shoesothers.com/category-161-b0.html]handbags[/url] and [url=http://www.shoesothers.com/category-432-b0.html]clothing[/url] online.
But how do i do??which payment is safe and easy??
And which shipping mode faster??
I am first time shipping online,So need everyone help.
Please help me and go here [url=http://www.shoesothers.com/category-263-b0.html]shoes[/url] teach me how to use??Many thanks!!

Name: Anonymous 2010-12-11 0:32

Pretty much straightforward local filter config.
the state line is for accepting packets associated with outgoing tcp connections.
The log line would work, although I don't see why -I 5 is used -A would suffice. -I is normally only used when debugging a running config.

you might want to add rules for icmp and udp depending what else the machine is used for. Accepting ping within a certain limit is usually a good idea.

Newer Posts
Don't change these.
Name: Email:
Entire Thread Thread List