Look ok ?

Homzz · 04-16-2004, 12:07 PM

Hi this is my first time config. IPTABLES wondering if this looks ok

iptables -F
iptables -X
iptables -P OUTPUT ACCEPT
iptables -P FORWARD DROP
iptables -P INPUT DROP

iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT

iptables -A INPUT -i eth0 -p tcp --dport http -j ACCEPT
iptables -A INPUT -i eth0 -p icmp -j ACCEPT

Then just open ports i want open such as ssh ftp etc...Sound ok Please let me know.

souljah · 04-17-2004, 07:47 AM

Looks like you have the right idea. It is always nice to add comments to your scripts, so you remember what you were thinking at a later time. for example:

iptables -A INPUT -p tcp --dport 21 -j ACCEPT #ftp
iptables -A INPUT -p tcp --dport 22 -j ACCEPT #ssh
iptables -A INPUT -p tcp --dport 80 -j ACCEPT #http

Enjoy

Homzz · 04-17-2004, 12:16 PM

thx, will try it and see how and goes and adding comments does make sense =P will give it a go

dominant · 04-17-2004, 12:57 PM

I think youhave forgoten the lo (localhost or 127.0.0.1) interface.
Moreover, you could DROP all the ICMP packets. It is recommended.