Firewall utilizando iptables
Segue um firewall bacana! Também tem sempre a versão atualizada no meu site ok? http://paginas.terra.com.br/educacao/chemonz. Falou.
Descrição
Segue um firewall bacana! Também tem sempre a versão atualizada no meu site ok? http://paginas.terra.com.br/educacao/chemonz. Falou.
####### Firewall escrito por Ch3m0nZ ############# ########### versão junho de 2006 ################# ########### chemonz@linuxmail.org ################# ############################################################## ##################### PARTE 1 ##################### #Limpando regras e politicas. iptables -F iptables -X #Negando todo trafico de pacotes. iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT #Barrando SSH (porta 4632) #iptables -A INPUT -p TCP --dport 4632 -j DROP #Barrando Time iptables -A INPUT -p TCP --dport 113 -j DROP #Barrando Auth iptables -A INPUT -p TCP --dport 37 -j DROP #Barrando VNC iptables -A INPUT -p TCP --dport 5901 -j DROP #Barrando X11 iptables -A INPUT -p TCP --dport 6000 -j DROP iptables -A INPUT -p TCP --dport 6001 -j DROP ##################### PARTE 2 ##################### #liberando tráfego de rede local (127.0.0.1) iptables -A INPUT -i lo -j ACCEPT #iptables -A OUTPUT -o lo -j ACCEPT #Liberando nessus #iptables -A INPUT -p tcp --destination-port 1241 -j ACCEPT #Liberando socks iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 1080:1080 -m state --state NEW -j ACCEPT #Liberando SSH (porta 4632) iptables -A INPUT -p tcp --destination-port 4632 -j ACCEPT #Abrindo interface lo iptables -A INPUT -p tcp --syn -s 127.0.0.1/255.0.0.0 -j ACCEPT #Liberando pacotes que realmente devem estabelecer conexão. iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT #Liberar Apache na porta 8080 iptables -A INPUT -p tcp --destination-port 8080 -j ACCEPT #iptables -A FORWARD -j ACCEPT -p tcp --dport 8080 #Liberar acesso http (www) iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 80:80 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 8080:8080 -m state --state NEW -j ACCEPT #Liberando MSN iptables -A OUTPUT -p tcp --sport 1024:5999 --dport 1863:1863 -m state --state NEW -j ACCEPT #Liberando ping externo local p internet #iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT #Liberando conexão (P2P Gnutela) iptables -A OUTPUT -p tcp --sport 0:65535 --dport 6346:6346 -m state --state NEW -j ACCEPT #Liberando conexão (P2P aMule) iptables -A INPUT -p tcp --destination-port 4662 -j ACCEPT iptables -A FORWARD -j ACCEPT -p tcp --dport 4672 #Liberando Azureus iptables -A INPUT -p tcp --destination-port 6881 -j ACCEPT iptables -A FORWARD -j ACCEPT -p tcp --dport 6881 #################### fim do firewall ####################