|
@@ -454,9 +454,27 @@ apt-get install portsentry
|
454
|
454
|
emacs /etc/portsentry/portsentry.conf
|
455
|
455
|
#+END_SRC
|
456
|
456
|
|
|
457
|
+Uncomment the entry for *iptables support for Linux*
|
|
458
|
+
|
|
459
|
+Set the following properties:
|
|
460
|
+
|
|
461
|
+#+BEGIN_SRC: bash
|
|
462
|
+TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
|
|
463
|
+UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
|
|
464
|
+
|
|
465
|
+ADVANCED_EXCLUDE_TCP="113,139,70,80,443,143,6670,5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
|
466
|
+ADVANCED_EXCLUDE_UDP="520,138,137,67,70,80,443,143,6670,5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
|
467
|
+
|
|
468
|
+SCAN_TRIGGER="2"
|
|
469
|
+
|
|
470
|
+BLOCK_UDP="2"
|
|
471
|
+BLOCK_TCP="2"
|
|
472
|
+#+END_SRC
|
|
473
|
+
|
457
|
474
|
Save and exit.
|
458
|
475
|
|
459
|
476
|
#+BEGIN_SRC: bash
|
|
477
|
+service portsentry restart
|
460
|
478
|
emacs /tmp/firewall.sh
|
461
|
479
|
#+END_SRC
|
462
|
480
|
|