Enviado em 26/07/2017 - 13:17h
Boa tarde povo,
*nat
-P PREROUTING ACCEPT
-P OUTPUT ACCEPT
-P POSTROUTING ACCEPT
-A POSTROUTING -s 192.168.0.0/24 -j MASQUERADE
COMMIT
*filter
:INPUT DROP
:FORWARD DROP
:OUTPUT DROP
#SSHD
-A INPUT -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT
#SAMBA INPUT TCP
-A INPUT -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 137 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 138 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 139 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 445 -m state --state NEW,ESTABLISHED -j ACCEPT
#SAMBA OUTPUT TCP
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p tcp -m tcp --sport 137 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p tcp -m tcp --sport 138 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p tcp -m tcp --sport 139 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p tcp -m tcp --sport 445 -m state --state ESTABLISHED -j ACCEPT
#SAMBA INPUT UDP
-A INPUT -s 192.168.0.0/255.255.255.0 -i eth0 -p udp -m udp --dport 137 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.0.0/255.255.255.0 -i eth0 -p udp -m udp --dport 138 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.0.0/255.255.255.0 -i eth0 -p udp -m udp --dport 139 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -s 192.168.0.0/255.255.255.0 -i eth0 -p udp -m udp --dport 445 -m state --state NEW,ESTABLISHED -j ACCEPT
#SAMBA OUTPUT UDP
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p udp -m udp --sport 137 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p udp -m udp --sport 138 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p udp -m udp --sport 139 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -d 192.168.0.0/255.255.255.0 -p udp -m udp --sport 445 -m state --state ESTABLISHED -j ACCEPT
#DNS
-A INPUT -p udp -m udp --dport 53 -j ACCEPT
-A OUTPUT -p udp -m udp --sport 53 -j ACCEPT
#icmp
-A INPUT -p icmp --icmp-type echo-request -s 192.168.0.0/24 -j ACCEPT
-A OUTPUT -p icmp --icmp-type echo-reply -d 192.168.0.0/24 -j ACCEPT
-A FORWARD -p icmp --icmp-type echo-request -s 192.168.0.0/24 -j ACCEPT
-A FORWARD -p icmp --icmp-type echo-reply -d 192.168.0.0/24 -j ACCEPT
#DHCP ETH0 MODEM
-A INPUT -p tcp -d 192.168.0.1 -i eth0 --dport 67 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -p tcp -d 192.168.0.1 -i eth0 --dport 68 -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -s 192.168.0.1 -o eth0 --sport 67 -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -s 192.168.0.1 -o eth0 --sport 68 -m state --state ESTABLISHED -j ACCEPT
#VNC SERVER
-A INPUT -p tcp -s 192.168.0.0/24 -i eth0 --dport 5901 -m state --state NEW,ESTABLISHED -j ACCEPT
-A OUTPUT -p tcp -d 192.168.0.0/24 -o eth0 --sport 5901 -m state --state ESTABLISHED -j ACCEPT
COMMIT
DOOM clássico (quase) vanilla e um pouco melhorado
Mamãe, quero descompactar e também compactar arquivos no terminal!
Alias para atualizar apt e flatpak
Instalando Micosoft Edge no Fedora 40
junest - Mini Arch Linux dentro de sua Distro
Rescuezilla - o Clonezilla com interface gráfica e ferramentas
Latte Dock, um dock de aplicativos com várias opções de configuração para o KDE Plasma
Quais suas extensões favoritas? [RESOLVIDO] (15)
Não consigo baixar nada no Gutta (0)
Xubuntu vs Linux mint xfce (2)
É verdade que instalar Linux no Fedora dá travamento no distro? (8)