core/iptables/simple_firewall.rules

*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -p icmp -j ACCEPT 
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT 
-A INPUT -i lo -j ACCEPT 
-A INPUT -p tcp -j REJECT --reject-with tcp-reset 
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable 
-A INPUT -j REJECT --reject-with icmp-proto-unreachable 
COMMIT
2010-03-13 23:25:19 +08:00			`*filter`
			`:INPUT DROP [0:0]`
			`:FORWARD DROP [0:0]`
			`:OUTPUT ACCEPT [0:0]`
			`-A INPUT -p icmp -j ACCEPT`
Update iptables and iproute 2013-05-26 16:34:01 +08:00			`-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT`
2010-03-13 23:25:19 +08:00			`-A INPUT -i lo -j ACCEPT`
			`-A INPUT -p tcp -j REJECT --reject-with tcp-reset`
			`-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable`
			`-A INPUT -j REJECT --reject-with icmp-proto-unreachable`
			`COMMIT`