Added iptables-1.4.7 build template.
--HG-- extra : convert_revision : 0dec638dfbf3583a0fb60e29c5ec475a5a724fd2
This commit is contained in:
11
srcpkgs/iptables/files/simple_firewall.rules
Normal file
11
srcpkgs/iptables/files/simple_firewall.rules
Normal file
@@ -0,0 +1,11 @@
|
||||
*filter
|
||||
:INPUT DROP [0:0]
|
||||
:FORWARD DROP [0:0]
|
||||
:OUTPUT ACCEPT [0:0]
|
||||
-A INPUT -p icmp -j ACCEPT
|
||||
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
-A INPUT -p tcp -j REJECT --reject-with tcp-reset
|
||||
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
|
||||
-A INPUT -j REJECT --reject-with icmp-proto-unreachable
|
||||
COMMIT
|
||||
Reference in New Issue
Block a user