Hello,
 
I'm new to IPTables, and have wrote a script that does exactly what I want it to do.  Allow everything on the internal LAN out, but block everything from the external LAN.  It seemed pretty easy to write, so I'm sure I did something wrong.  If anyone notices any problems with this, could you let me know?
 
 
iptables=/sbin/iptables

$iptables -F INPUT
$iptables -F OUTPUT
$iptables -F FORWARD

$iptables -P INPUT ACCEPT
$iptables -P OUTPUT ACCEPT
$iptables -P FORWARD ACCEPT

$iptables -t nat -A POSTROUTING -o eth0 -d ! 192.168.1.0/24 -J MASQUERADE
$iptables -A FORWARD -s 192.168.1.0/24 -j ACCEPT

$iptables -A INPUT -d 0/0 -p tcp -j DROP
$iptables -A INPUT -d 0/0 -p udp -j DROP
$iptables -A INPUT -d 0/0 -p icmp -j DROP
 
Thanks!
Kevin

Reply via email to