|
Hello,
I'm new to IPTables, and have wrote a script that
does exactly what I want it to do. Allow everything on the internal LAN
out, but block everything from the external LAN. It seemed pretty easy to
write, so I'm sure I did something wrong. If anyone notices any problems
with this, could you let me know?
iptables=/sbin/iptables
$iptables -F INPUT $iptables -F OUTPUT $iptables -F FORWARD $iptables -P INPUT ACCEPT $iptables -P OUTPUT ACCEPT $iptables -P FORWARD ACCEPT $iptables -t nat -A POSTROUTING -o eth0 -d ! 192.168.1.0/24 -J MASQUERADE $iptables -A FORWARD -s 192.168.1.0/24 -j ACCEPT $iptables -A INPUT -d 0/0 -p tcp -j DROP $iptables -A INPUT -d 0/0 -p udp -j DROP $iptables -A INPUT -d 0/0 -p icmp -j DROP Thanks!
Kevin |
- Re: Check Script Kevin Powell
- Re: Check Script Maciej Soltysiak
