IPTables on LAMP server in data center

2011-05-11 Thread keith smith
Hi, I'm rather new to IPTables.  I've written a shell script to update and save the IPTables on a web server that only has HTTPD, SSL, Secured FTP, and SSH available. I need to be able to access the server via SSH and SFTP and want to only allow the data center's local net and only those, by

Re: IPTables on LAMP server in data center

2011-05-11 Thread Richard Wilson
Keith, What you have is fine and will work, but here's something that will make it faster and more maintainable: # Create an SSH Access Table iptables -N SSHACS Right before your "#Data center Local network" line, put: # Handle SSH Traffic iptables -A INPUT -p tcp --dport 22 -j SSHACS Then

Re: IPTables on LAMP server in data center

2011-05-11 Thread Joseph Sinclair
You could also use tcp wrappers for this, and that's a bit faster, not to mention simpler. Note: this setup will end up locking out all communication not specifically listed in hosts.allow; so make sure hosts.allow is correct before modifying hosts.deny. It's best to enable something like telne

Re: IPTables on LAMP server in data center

2011-05-12 Thread keith smith
Thanks Richard! Keith Smith --- On Wed, 5/11/11, Richard Wilson wrote: From: Richard Wilson Subject: Re: IPTables on LAMP server in data center To: "Main PLUG discussion list" Date: Wednesday, May 11, 2011, 7:52 PM Keith,

Re: IPTables on LAMP server in data center

2011-05-12 Thread keith smith
Interesting thought!  Thank you Joseph! Keith Smith --- On Wed, 5/11/11, Joseph Sinclair wrote: From: Joseph Sinclair Subject: Re: IPTables on LAMP server in data center To: "Main PLUG discussion list" Date: Wednesday, May 11, 2011, 10:42 PM You could al

Re: IPTables on LAMP server in data center

2011-05-12 Thread Ben Trussell
. Cheers, Ben On Thu, May 12, 2011 at 11:31 AM, keith smith wrote: > > Interesting thought! Thank you Joseph! > > > Keith Smith > > --- On *Wed, 5/11/11, Joseph Sinclair * wrote: > > > From: Joseph Sinclair > > Subject: Re: IPTab