12 lines
361 B
Bash
12 lines
361 B
Bash
|
#!/bin/sh
|
||
|
|
||
|
# Drop all packets by default.
|
||
|
iptables -P INPUT DROP
|
||
|
# Allow preexisting connections
|
||
|
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
|
||
|
# Allow SSH from 192.0.2.0/24
|
||
|
iptables -A INPUT -p tcp -s 192.0.2.0/24 --destination-port 22 -i eth0 -j ACCEPT
|
||
|
# Allow HTTP from all
|
||
|
iptables -A INPUT -p tcp --destination-port 80 -i eth0 -j ACCEPT
|
||
|
|