Iptables - Revision history

Pchero: /* ETC */

2019-06-18T12:31:12Z

ETC

← Older revision		Revision as of 12:31, 18 June 2019
Line 143:		Line 143:

	== ETC ==		== ETC ==
			=== Persistent mode ===
	Run the iptables rule in a persistent mode.		Run the iptables rule in a persistent mode.
	<pre>		<pre>

Pchero: /* See also */

2019-06-18T12:30:48Z

Pchero: /* See also */

2016-08-08T07:32:23Z

Pchero: /* Samples */

2016-08-08T07:32:11Z

Samples

@@ Line 126: / Line 126: @@
 $ sudo iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT
 </source>
 == See also ==

Pchero at 08:40, 25 July 2016

2016-07-25T08:40:51Z

← Older revision		Revision as of 08:40, 25 July 2016
Line 135:		Line 135:
	<references />		<references />

	[[category:command]]		[[category:command/utility]]

Pchero at 13:20, 28 August 2015

2015-08-28T13:20:48Z

← Older revision		Revision as of 13:20, 28 August 2015
Line 135:		Line 135:
	<references />		<references />

	[[category:~~linux~~]]		[[category:command]]

Pchero: /* Default DROP */

2015-07-27T11:36:51Z

Default DROP

← Older revision		Revision as of 11:36, 27 July 2015
Line 125:		Line 125:
	$ sudo iptables -A INPUT -p tcp --dport 5061 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 5061 -j ACCEPT
	$ sudo iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT		$ sudo iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT
	</~~pre~~>		</source>

	== See also ==		== See also ==

Pchero: /* Default DROP */

2015-07-27T10:10:18Z

Default DROP

← Older revision		Revision as of 10:10, 27 July 2015
Line 100:		Line 100:
	=== Default DROP ===		=== Default DROP ===
	기본 설정을 DROP으로 하고, 이어서 필요한 서비스들에 대한 포트들만 ACCEPT 하는 전략.		기본 설정을 DROP으로 하고, 이어서 필요한 서비스들에 대한 포트들만 ACCEPT 하는 전략.
	<~~pre~~>		<source lang=bash>
	iptables -P INPUT DROP		#-- Set default policy to DROP
			$ sudo iptables -P INPUT DROP

	-- ssh		#-- ssh
	iptables -A INPUT -p tcp --dport 22 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 22 -j ACCEPT
	iptables -A INPUT -p udp --dport 22 -j ACCEPT		$ sudo iptables -A INPUT -p udp --dport 22 -j ACCEPT

	-- http		#-- http
	iptables -A INPUT -p tcp --dport 80 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 80 -j ACCEPT
	iptables -A INPUT -p udp --dport 80 -j ACCEPT		$ sudo iptables -A INPUT -p udp --dport 80 -j ACCEPT

	-- https		#-- https
	iptables -A INPUT -p tcp --dport 443 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 443 -j ACCEPT
	iptables -A INPUT -p udp --dport 443 -j ACCEPT		$ sudo iptables -A INPUT -p udp --dport 443 -j ACCEPT

	-- jenkins		#-- jenkins
	iptables -A INPUT -p tcp --dport 8081 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 8081 -j ACCEPT

	-- sip		#-- sip
	iptables -A INPUT -p tcp --dport 5060 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 5060 -j ACCEPT
	iptables -A INPUT -p tcp --dport 5060 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 5060 -j ACCEPT
	iptables -A INPUT -p tcp --dport 5061 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 5061 -j ACCEPT
	iptables -A INPUT -p tcp --dport 5061 -j ACCEPT		$ sudo iptables -A INPUT -p tcp --dport 5061 -j ACCEPT
	iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT		$ sudo iptables -A INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT
	</pre>		</pre>

Pchero at 10:08, 27 July 2015

2015-07-27T10:08:02Z

@@ Line 39: / Line 39: @@
   -V, –version : 버전 정보를 보여준다.
 </pre>
 == Samples ==
 === Default DROP ===
 기본 설정을 DROP으로 하고, 이어서 필요한 서비스들에 대한 포트들만 ACCEPT 하는 전략.
@@ Line 73: / Line 129: @@
 * http://www.cyberciti.biz/tips/linux-iptables-examples.html - Linux: 20 Iptables Examples For New SysAdmins
 * https://www.thomas-krenn.com/en/wiki/Saving_Iptables_Firewall_Rules_Permanently - Saving Iptables Firewall Rules Permanently
 == References ==

Pchero at 13:30, 22 July 2015

2015-07-22T13:30:15Z

← Older revision		Revision as of 13:30, 22 July 2015
Line 72:		Line 72:
	== See also ==		== See also ==
	* http://www.cyberciti.biz/tips/linux-iptables-examples.html - Linux: 20 Iptables Examples For New SysAdmins		* http://www.cyberciti.biz/tips/linux-iptables-examples.html - Linux: 20 Iptables Examples For New SysAdmins
			* https://www.thomas-krenn.com/en/wiki/Saving_Iptables_Firewall_Rules_Permanently - Saving Iptables Firewall Rules Permanently

	== References ==		== References ==

← Older revision		Revision as of 07:32, 8 August 2016
Line 146:		Line 146:
	* https://www.thomas-krenn.com/en/wiki/Saving_Iptables_Firewall_Rules_Permanently - Saving Iptables Firewall Rules Permanently		* https://www.thomas-krenn.com/en/wiki/Saving_Iptables_Firewall_Rules_Permanently - Saving Iptables Firewall Rules Permanently
	* http://webdir.tistory.com/170 - [CentOS] 방화벽 설정 - iptables		* http://webdir.tistory.com/170 - [CentOS] 방화벽 설정 - iptables
			* https://codeghar.wordpress.com/2012/05/02/ubuntu-12-04-ipv4-nat-gateway-and-dhcp-server/ - Ubuntu 12.04 IPv4 NAT Gateway and DHCP Server
			* https://www.howtoforge.com/nat_iptables - Step-By-Step Configuration of NAT with iptables
			* http://www.revsys.com/writings/quicktips/nat.html - Quick-Tip: Linux NAT in Four Steps using iptables

	== References ==		== References ==

← Older revision		Revision as of 12:30, 18 June 2019
Line 141:		Line 141:
	# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE		# iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
	</pre>		</pre>

			== ETC ==
			Run the iptables rule in a persistent mode.
			<pre>
			$ sudo apt install iptables-persistent
			</pre>
			* https://www.thomas-krenn.com/en/wiki/Saving_Iptables_Firewall_Rules_Permanently

	== See also ==		== See also ==