iptables

PinoyAko · 06-01-2011, 02:59 PM

I am currently using this to block ports in my server but I think this is not the best way. Can you please give the proper way to do this?

Code:

iptables -A FORWARD -j DROP -p tcp --dport $PORT -i eth+
iptables -A FORWARD -j DROP -p tcp --dport $PORT -o eth+
iptables -A INPUT -j DROP  -p tcp --dport $PORT -i eth+
iptables -A OUTPUT -j DROP - -p tcp --dport $PORT -o eth+

Thank you

zordrak · 06-01-2011, 03:13 PM

Set the default policy for INPUT to DROP.

Then only create ACCEPT rules for specific ports you want to block.

For FORWARD set the default policy to DROP unless you know you need otherwise.

For OUTPUT leave the default policy at ACCEPT and create specific rules if needed for blocking outbound ports or port ranges.

PinoyAko · 06-02-2011, 08:22 AM

Quote:

Originally Posted by zordrak

Set the default policy for INPUT to DROP.

Then only create ACCEPT rules for specific ports you want to block.

I believe this to be the ports I want to OPEN?

zordrak · 06-02-2011, 08:42 AM

Yeah, my bad.