[DEPRECATED] IPTables - Quelques Scripts pour différents serveurs...
Hyperviseur Proxmox
#!/bin/sh # Vider les tables actuelles iptables -t filter -F # Vider les règles personnelles iptables -t filter -X # Interdire toute connexion entrante et sortante iptables -t filter -P INPUT DROP iptables -t filter -P FORWARD DROP iptables -t filter -P OUTPUT DROP # --- # Ne pas casser les connexions etablies iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT # Autoriser loopback iptables -t filter -A INPUT -i lo -j ACCEPT iptables -t filter -A OUTPUT -o lo -j ACCEPT # ICMP (Ping) iptables -t filter -A INPUT -p icmp -j ACCEPT iptables -t filter -A OUTPUT -p icmp -j ACCEPT # --- # SSH In iptables -t filter -A INPUT -p tcp --dport 22 -j ACCEPT # SSH Out iptables -t filter -A OUTPUT -p tcp --dport 22 -j ACCEPT # DNS In/Out iptables -t filter -A OUTPUT -p tcp --dport 53 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 53 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 53 -j ACCEPT # Proxmox Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 8006 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 8006 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 8006 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 8006 -j ACCEPT # HTTP Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 80 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 80 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 80 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 80 -j ACCEPT # HTTPS Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 443 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 443 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 443 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 443 -j ACCEPT # HaProxy Stats Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 8088 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 8088 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 8088 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 8088 -j ACCEPT # NTP Out iptables -t filter -A OUTPUT -p udp --dport 123 -j ACCEPT
Serveur Multimédia KimSufi
#!/bin/sh # Vider les tables actuelles iptables -t filter -F # Vider les règles personnelles iptables -t filter -X # Interdire toute connexion entrante et sortante iptables -t filter -P INPUT DROP iptables -t filter -P FORWARD DROP iptables -t filter -P OUTPUT DROP # --- # Ne pas casser les connexions etablies iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT # Autoriser loopback iptables -t filter -A INPUT -i lo -j ACCEPT iptables -t filter -A OUTPUT -o lo -j ACCEPT # ICMP (Ping) iptables -t filter -A INPUT -p icmp -j ACCEPT iptables -t filter -A OUTPUT -p icmp -j ACCEPT # --- # SSH In iptables -t filter -A INPUT -p tcp --dport 22 -j ACCEPT # SSH Out iptables -t filter -A OUTPUT -p tcp --dport 22 -j ACCEPT # DNS In/Out iptables -t filter -A OUTPUT -p tcp --dport 53 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 53 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 53 -j ACCEPT # RPC Transmission Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 51413 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 51413 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 51413 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 51413 -j ACCEPT # Transmission Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 9091 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 9091 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 9091 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 9091 -j ACCEPT # HTTP Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 80 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 80 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 80 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 80 -j ACCEPT # HTTPS Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 443 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 443 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 443 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 443 -j ACCEPT # HaProxy Stats Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 8088 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 8088 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 8088 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 8088 -j ACCEPT # NTP Out iptables -t filter -A OUTPUT -p udp --dport 123 -j ACCEPT
Mutu
#!/bin/sh # Vider les tables actuelles iptables -t filter -F # Vider les règles personnelles iptables -t filter -X # Interdire toute connexion entrante et sortante iptables -t filter -P INPUT DROP iptables -t filter -P FORWARD DROP iptables -t filter -P OUTPUT DROP # --- # Ne pas casser les connexions etablies iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT # Autoriser loopback iptables -t filter -A INPUT -i lo -j ACCEPT iptables -t filter -A OUTPUT -o lo -j ACCEPT # ICMP (Ping) iptables -t filter -A INPUT -p icmp -j ACCEPT iptables -t filter -A OUTPUT -p icmp -j ACCEPT # --- # SSH In iptables -t filter -A INPUT -p tcp --dport 22 -j ACCEPT # SSH Out iptables -t filter -A OUTPUT -p tcp --dport 22 -j ACCEPT # DNS In/Out iptables -t filter -A OUTPUT -p tcp --dport 53 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 53 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 53 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 53 -j ACCEPT # HTTP Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 80 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 80 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 80 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 80 -j ACCEPT # HTTPS Panel In/Out iptables -t filter -A OUTPUT -p tcp --dport 443 -j ACCEPT iptables -t filter -A OUTPUT -p udp --dport 443 -j ACCEPT iptables -t filter -A INPUT -p tcp --dport 443 -j ACCEPT iptables -t filter -A INPUT -p udp --dport 443 -j ACCEPT # NTP Out iptables -t filter -A OUTPUT -p udp --dport 123 -j ACCEPT