home · contact · privacy
WIP.
authorChristian Heller <c.heller@plomlompom.de>
Fri, 23 Nov 2018 00:24:29 +0000 (01:24 +0100)
committerChristian Heller <c.heller@plomlompom.de>
Fri, 23 Nov 2018 00:24:29 +0000 (01:24 +0100)
all_new_2018/linkable_etc_files/server/etc/iptables/rules.v4 [new file with mode: 0644]
all_new_2018/setup_server.sh

diff --git a/all_new_2018/linkable_etc_files/server/etc/iptables/rules.v4 b/all_new_2018/linkable_etc_files/server/etc/iptables/rules.v4
new file mode 100644 (file)
index 0000000..f568789
--- /dev/null
@@ -0,0 +1,11 @@
+*filter
+:INPUT DROP [0:0]
+:FORWARD DROP [0:0]
+:OUTPUT ACCEPT [0:0]
+-A INPUT -i lo -j ACCEPT
+-A INPUT -p icmp -j ACCEPT
+-A INPUT -p tcp --dport 22 -j ACCEPT
+-A INPUT -p tcp --dport 443 -j ACCEPT
+-A INPUT -p tcp --dport 80 -j ACCEPT
+-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
+COMMIT
\ No newline at end of file
index a4f859966098316c9b863a9c3588722305859350..e4fbaa2700aa9efbdc3f38027c6861fb735d6f0a 100755 (executable)
@@ -11,7 +11,7 @@ fi
 hostname="$1"
 fqdn="$2"
 
-# Adapt /etc/ to our needs by symlinking into ./linkable_etc_files. This
+# Adapt /etc/ to our needs by hardlinking into ./linkable_etc_files. This
 # will set basic configurations affecting following steps, such as setup
 # of APT and the locale selection, so needs to be right at the beginning.
 ./hardlink_etc.sh all server