
williamverri
(usa Linux Mint)
Enviado em 10/11/2019 - 20:24h
Vou mostra minhas regras para ver se eu estou fazendo algo de errado...
#!/bin/bash
case $1 in
start)
#Limpa Regras das tabelas e Zera os Contadores
iptables -t filter -F
iptables -t nat -F
iptables -t mangle -F
iptables -Z
#Altera a politica das tabelas para DROP
iptables -t filter -P INPUT DROP
iptables -t filter -P FORWARD DROP
iptables -t filter -P OUTPUT DROP
#Libera LoopBack
iptables -t filter -A INPUT -i lo -j ACCEPT
iptables -t filter -A OUTPUT -o lo -j ACCEPT
#INPUT
iptables -t filter -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -t filter -A INPUT -p udp -m multiport --dports 1812,1813 -j ACCEPT #Portas do Radius
iptables -t filter -A INPUT -p tcp -m multiport --dports 80,81,85,88,89,90,443,445 -m state --state NEW -j ACCEPT
iptables -t filter -A INPUT -p tcp -s 172.16.0.0/12,192.168.0.0/16 --dport 2223 -j ACCEPT #Libera SSH
iptables -t filter -A INPUT -p icmp -s 172.16.0.0/12 -j ACCEPT
#OUTPUT
iptables -t filter -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -t filter -A OUTPUT -p udp --dport 3799 -j ACCEPT #Portas do Radius Incoming
iptables -t filter -A OUTPUT -p udp --dport 53 -d 45.166.44.10,45.166.45.2,8.8.8.8,8.8.4.4 -j ACCEPT #Libera Resolução DNS
iptables -t filter -A OUTPUT -p tcp -m multiport --dports 80,443,587 -j ACCEPT #Libera 80 443 e smtp
iptables -t filter -A OUTPUT -p icmp -j ACCEPT
;;
stop)
#Limpa Regras das tabelas e Zera os Contadores
iptables -t filter -F
iptables -t nat -F
iptables -t mangle -F
iptables -Z
#Autera a politica das tabelas para ACCEPT
iptables -t filter -P INPUT ACCEPT
iptables -t filter -P FORWARD ACCEPT
iptables -t filter -P OUTPUT ACCEPT
;;
restart)
$0 stop
$0 start
;;
esac