The file iptables.up.client.rules contains a minimal configuration for client configuration:
this configuration does not limit to a specific network interface
-
INPUT
- all on
loloopback interface - Allow already established tcp & udp connections
- icmp (ping) requests and replies
- all on
-
FORWARD -nothing (default DROP)
-
OUTPUT -all (trust internal users)
It obviously drops all the rest.
The file iptables.up.server.rules contains a minimal configuration for basic server configuration:
this configuration limits rules to a specific network interface eth0
-
INPUT
- all on
loloopback interface - Allow new tcp connection on ports 80/443 (http/https web server) and 22 (ssh server) on
eth0interface - Allow already established tcp & udp connections
- Allow new udp connection on port 53 (dns server) on
eth0interface - icmp (ping) requests and replies
- all on
-
FORWARD -nothing (default DROP)
-
OUTPUT -all (trust internal users)
It obviously drops all the rest.
Limits a maximum of 50 connection per minute after a total of 100 connection reached.
Dropped packets are logged in a limit of 2 per minute with a log-level of 7
- Copy the
iptables.up.client.rulesoriptables.up.server.rulesfile in your/etcdirectory
$ (sudo) cp iptables.up.client.rules /etc/iptables.up.rules
- Copy the startup script
iptables.startupin the/etc/network/if-pre-up.d/directory
$ (sudo) cp iptables.startup /etc/network/if-pre-up.d/iptables
$ (sudo) chmod +x /etc/network/if-pre-up.d/iptables