Red Hat NETSCAPE MANAGEMENT SYSTEM 6.2 - COMMAND-LINE Guida di Installazione Scaricare il pdf (Pagina 78)

# Set a list of public server port numbers here...not too many!

# These will be open to the world, so use caution. The example is

# sshd, and HTTP (www). Any services included here should be the

# latest version available from your vendor. Comment out to disable

# all Public services. Do not put any ports to be forwarded here,

# this only direct access.

#PUBLIC_PORTS="22 80 443"

PUBLIC_PORTS="22"

# If we want to do port forwarding, this is the host

# that will be forwarded to.

#FORWARD_HOST="192.168.1.3"

# A list of ports that are to be forwarded.

#FORWARD_PORTS="25 80"

# If you get your public IP address via DHCP, set this.

DHCP_SERVER=66.21.184.66

# If you need identd for a mail server, set this.

MAIL_SERVER=

# A list of unwelcome hosts or nets. These will be denied access

# to everything, even our 'Public' services. Provide your own list.

#BLACKLIST="11.22.33.44 55.66.77.88"

# A list of "trusted" hosts and/or nets. These will have access to

# ALL protocols, and ALL open ports. Be selective here.

#TRUSTED="1.2.3.4/8 5.6.7.8"

## end user configuration options #################################

###################################################################

# Any and all addresses from anywhere.

ANYWHERE="0/0"

# These modules may need to be loaded:

modprobe ip_conntrack_ftp

modprobe ip_nat_ftp

# Start building chains and rules #################################

# Let's start clean and flush all chains to an empty state.

$IPTABLES −F

$IPTABLES −X

# Set the default policies of the built−in chains. If no match for any

# of the rules below, these will be the defaults that IPTABLES uses.

$IPTABLES −P FORWARD DROP

$IPTABLES −P OUTPUT ACCEPT

$IPTABLES −P INPUT DROP

# Accept localhost/loopback traffic.

$IPTABLES −A INPUT −i lo −j ACCEPT

# Get our dynamic IP now from the Inet interface. WAN_IP will be the

# address we are protecting from outside addresses.

[ −z "$WAN_IP" ] &&\

WAN_IP=`ifconfig $WAN_IFACE |grep inet |cut −d : −f 2 |cut −d \ −f 1`

# Bail out with error message if no IP available! Default policy is

Security Quick−Start HOWTO for Red Hat Linux

8.10.2. iptables II 75

1 2 ... 73 74 75 76 77 78 79 80 81 82

Commenti su questo manuale

Nessun commento

Red Hat NETSCAPE MANAGEMENT SYSTEM 6.2 - COMMAND-LINE Guida di Installazione Pagina 78

Commenti su questo manuale