WIP.

diff --git a/all_new_2018/linkable_etc_files/server/etc/iptables/rules.v4 b/all_new_2018/linkable_etc_files/server/etc/iptables/rules.v4
new file mode 100644 (file)
index 0000000..f568789
--- /dev/null
+++ b/all_new_2018/linkable_etc_files/server/etc/iptables/rules.v4
@@ -0,0 +1,11 @@
+*filter
+:INPUT DROP [0:0]
+:FORWARD DROP [0:0]
+:OUTPUT ACCEPT [0:0]
+-A INPUT -i lo -j ACCEPT
+-A INPUT -p icmp -j ACCEPT
+-A INPUT -p tcp --dport 22 -j ACCEPT
+-A INPUT -p tcp --dport 443 -j ACCEPT
+-A INPUT -p tcp --dport 80 -j ACCEPT
+-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
+COMMIT
\ No newline at end of file

diff --git a/all_new_2018/setup_server.sh b/all_new_2018/setup_server.sh
index a4f859966098316c9b863a9c3588722305859350..e4fbaa2700aa9efbdc3f38027c6861fb735d6f0a 100755 (executable)
--- a/all_new_2018/setup_server.sh
+++ b/all_new_2018/setup_server.sh
@@ -11,7 +11,7 @@ fi
 hostname="$1"
 fqdn="$2"
 
-# Adapt /etc/ to our needs by symlinking into ./linkable_etc_files. This
+# Adapt /etc/ to our needs by hardlinking into ./linkable_etc_files. This
 # will set basic configurations affecting following steps, such as setup
 # of APT and the locale selection, so needs to be right at the beginning.
 ./hardlink_etc.sh all server