apt-get install iptables
CON FIREWALL
creare un file contenente le regole
/etc/iptables.up.rules
in questo modo aprendo webmin lo carica e utilizza correttamente.
# Generated by Andrea76
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
# INPUT GENERAL 76
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p tcp --dport 80 -j ACCEPT
-A INPUT -p tcp --dport 443 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 4040 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 4662 -j ACCEPT
-A INPUT -p udp -m udp --dport 4672 -j ACCEPT
-A INPUT -s 199.166.133.0/24 -j ACCEPT
-A INPUT -s 80.86.154.148 -j ACCEPT
-A INPUT -s 194.20.145.94 -j ACCEPT
-A INPUT -p tcp -m tcp -s 199.166.133.0/24 --dport 4711 -j ACCEPT
-A INPUT -p tcp -m tcp -s 199.166.133.0/24 --dport 21:22 -j ACCEPT
-A INPUT -p tcp -m tcp -s 199.166.133.0/24 --dport 14376 -j ACCEPT
-A INPUT -p tcp -m tcp -s 199.166.133.0/24 --dport 5901 -j ACCEPT
-A INPUT -p tcp -m tcp -s 199.166.133.0/24 --dport 445 -j ACCEPT
-A INPUT -p tcp -m tcp -s 194.20.145.94 --dport 4711 -j ACCEPT
# OUTPUT 76
-A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
# AUTOMATIC
-A FORWARD -o eth0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A FORWARD -i eth0 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
-A OUTPUT -o eth0 -j LOG --log-level 7 --log-prefix BANDWIDTH_OUT:
-A INPUT -p tcp -m tcp -s 194.20.145.94 --dport 21:22 -j ACCEPT
-A INPUT -p tcp -m tcp -s 194.20.145.94 --dport 14376 -j ACCEPT
-A INPUT -p tcp -m tcp -s 194.20.145.94 --dport 5901 -j ACCEPT
-A INPUT -p tcp -m tcp -s 194.20.145.94 --dport 445 -j ACCEPT
-A INPUT -j DROP
-A INPUT -i eth0 -j LOG --log-level 7 --log-prefix BANDWIDTH_IN:
COMMIT
# Completed
# Generated by Andrea76
*mangle
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
# Generated by Andrea76
*nat
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:PREROUTING ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT
# Completed
SENZA FIREWALL
Per utilizzare il file bisogna creare il file
/etc/network/if-up.d/iptables.up.rules contenente
#!/bin/bash
/sbin/iptables-restore < /etc/iptables.up.rules
e poi lo si rende avviabile
chmod +x /etc/network/if-up.d/iptables.up.rules
