I want to keep all traffic trying to establish a connection to my host from the internet to be dropped. This host is my lan's gateway.
eth0 is the internet interface
eth1 es my lan's interface.
Will this rule get what I want?
Code:
iptables -A INPUT -i eth0 -m conntrack --ctstate ! NEW -j ACCEPT
Or is this one better suited?
Code:
iptables -A INPUT -i eth0 -m conntrack --ctstate NEW -j DROP
or is there another even better suited?
