Quick Template to Lock Down iptables

Hangetsu · 11-30-2005, 11:57 AM

I took a look for something like the title, but only found specific questions on iptables; If something like what I'm about to ask for already exists on the forums, I apologize in advance.

I'm planning for the near-future to only run a desktop version of SuSE 10 Linux -- No server services, etc. Is there a quick template I could use to set up my ipTables to only allow connections that I initiate? While I know Linux can be more secure than Windows, I knew alot more about locking down Windows than I do Linux!

Thanks for the help!

bulliver · 11-30-2005, 04:37 PM

Code:

IPTABLES=/sbin/iptables

$IPTABLES -P INPUT DROP
$IPTABLES -F INPUT
$IPTABLES -P OUTPUT DROP
$IPTABLES -F OUTPUT

$IPTABLES -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPTABLES -A INPUT -i lo -j ACCEPT
$IPTABLES -A INPUT -j DROP

$IPTABLES -A OUTPUT -o lo -j ACCEPT
$IPTABLES -A OUTPUT -j DROP

Should do it I think...