noe.raphanaud/siotp
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

ferm

Browse Source
This commit is contained in:
raphanaud 2021-05-28 10:46:21 +02:00
parent c0206dfe3c
commit 4de0324acf
6 changed files with 99 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
sio1/ferm/tppf/fw.sh Executable file
View File

@ -0,0 +1,3 @@
#!/bin/bash
sysctl -w net.ipv4.ip_forward=1

11
sio1/ferm/tppf/fw1.sh Executable file
View File

@ -0,0 +1,11 @@
#!/bin/bash
sysctl -w net.ipv4.ip_forward=1
iptables -F -t filter
iptables -F nat
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT

20
sio1/ferm/tppf/fw3.sh Executable file
View File

@ -0,0 +1,20 @@
#!/bin/bash
sysctl -w net.ipv4.ip_forward=1
iptables -F -t filter
iptables -F nat
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --sport 80 -j ACCEPT
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -A INPUT -p udp --sport 53 -j ACCEPT
iptables -A OUTPUT -p tcp -d 10.121.38.1 --dport 8080 -j ACCEPT
iptables -A INPUT -p tcp -d 10.121.38.1 --sport 8080 -j ACCEPT

16
sio1/ferm/tppf/fw3.sh.save Executable file
View File

@ -0,0 +1,16 @@
#!/bin/bash
sysctl -w net.ipv4.ip_forward=1
iptables -F -t filter
iptables -F nat
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT

22
sio1/ferm/tppf/fw3.sh.save.1 Executable file
View File

@ -0,0 +1,22 @@
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
#!/bin/bash
sysctl -w net.ipv4.ip_forward=1
iptables -F -t filter
iptables -F nat
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
iptables -A INPUT -p tcp -m multiport --dports 53,80,21 -j ACCEPT
iptables -A OUTPUT -p tcp -m multiport --sports 53,80,21 -j ACCEPT

27
sio1/ferm/tppf/fw4.sh Executable file
View File

@ -0,0 +1,27 @@
#!/bin/bash
sysctl -w net.ipv4.ip_forward=1
iptables -F -t filter
iptables -F nat
iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --sport 22 -j ACCEPT
iptables -A OUTPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --sport 80 -j ACCEPT
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -A INPUT -p udp --sport 53 -j ACCEPT
iptables -A OUTPUT -p tcp -d 10.121.38.1 --dport 8080 -j ACCEPT
iptables -A INPUT -p tcp -d 10.121.38.1 --sport 8080 -j ACCEPT
iptables -t nat -A POSTROUTING -o enp0s3 -j MASQUERADE
iptables -A FORWARD -o enp0s3 -j ACCEPT
iptables -A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT