caelebfi/etckeeper
Archived
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Initial commit

Browse Source
This commit is contained in:
Gitea
2021-10-27 17:20:29 +02:00
commit 0a35a1a0ec
4985 changed files with 206213 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
iptables.rules
+84
View File
@@ -0,0 +1,84 @@
# Generated by iptables-save v1.4.21 on Wed Jan 30 09:18:31 2019
*raw
:PREROUTING ACCEPT [5460817:1344639542]
:OUTPUT ACCEPT [4257835:7629871073]
COMMIT
# Completed on Wed Jan 30 09:18:31 2019
# Generated by iptables-save v1.4.21 on Wed Jan 30 09:18:31 2019
*nat
:PREROUTING ACCEPT [75089:4321268]
:POSTROUTING ACCEPT [48553:3116286]
:OUTPUT ACCEPT [53216:4758815]
COMMIT
# Completed on Wed Jan 30 09:18:31 2019
# Generated by iptables-save v1.4.21 on Wed Jan 30 09:18:31 2019
*mangle
:PREROUTING ACCEPT [5460817:1344639542]
:INPUT ACCEPT [5460817:1344639542]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [4257835:7629871073]
:POSTROUTING ACCEPT [4251758:7628082164]
COMMIT
# Completed on Wed Jan 30 09:18:31 2019
# Generated by iptables-save v1.4.21 on Wed Jan 30 09:18:31 2019
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [1:323]
:LOGGING - [0:0]
:fail2ban-apache - [0:0]
:fail2ban-sasl - [0:0]
:fail2ban-ssh - [0:0]
-A INPUT -p tcp -m multiport --dports 25,465,143,220,993,110,995 -j fail2ban-sasl
-A INPUT -p tcp -m multiport --dports 80,443 -j fail2ban-apache
-A INPUT -p tcp -m tcp --dport 22 -j fail2ban-ssh
-A INPUT -p tcp -m tcp --dport 443 --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 10 --connlimit-mask 0 -j REJECT --reject-with tcp-reset
-A INPUT -p tcp -m tcp --dport 80 --tcp-flags FIN,SYN,RST,ACK SYN -m connlimit --connlimit-above 10 --connlimit-mask 0 -j REJECT --reject-with tcp-reset
-A INPUT -i lo -j ACCEPT
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 0 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -m limit --limit 25/min --limit-burst 100 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -m limit --limit 25/min --limit-burst 100 -j ACCEPT
-A INPUT -s 173.249.60.107/32 -j DROP
-A INPUT -s 216.244.66.243/32 -j DROP
-A INPUT -s 144.76.4.41/32 -j DROP
-A INPUT -s 5.9.73.27/32 -j DROP
-A INPUT -s 79.137.51.84/32 -j DROP
-A INPUT -s 94.177.242.209/32 -j DROP
-A INPUT -s 217.61.113.147/32 -j DROP
-A INPUT -s 78.46.35.141/32 -j DROP
-A INPUT -p tcp -m tcp --dport 21 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 993 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 995 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 1024:65535 -j ACCEPT
-A INPUT -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -p udp -m udp --dport 64738 -j ACCEPT
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
-A INPUT -j LOGGING
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 25 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 53 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 587 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 993 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 995 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 2703 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 22000:22999 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 53 -j ACCEPT
-A LOGGING -m limit --limit 2/min -j LOG --log-prefix "IPTables Packet Dropped: " --log-level 7
-A LOGGING -j DROP
-A fail2ban-apache -j RETURN
-A fail2ban-sasl -j RETURN
-A fail2ban-ssh -j RETURN
COMMIT
# Completed on Wed Jan 30 09:18:31 2019