Webサーバiptablesの迅速な構成

1296 ワード

#!/bin/bash
iptables -P INPUT ACCEPT
iptables -P OUTPUT ACCEPT
iptables -P FORWARD ACCEPT
iptables -F
iptables -X
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -p icmp -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 8003 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 8041 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 8010 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 8000 -j ACCEPT
iptables -A INPUT -p udp -m udp --dport 8011 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 11211 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 8003 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 8041 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 8010 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 8000 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 8011 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 8800 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 8900 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 3306 -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
service iptables save
service iptables restart