|
|
|
|
1209
|
TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,3000,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
|
1209
|
TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,3000,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
|
1210
|
UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,3000,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
|
1210
|
UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,3000,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
|
1211
|
|
1211
|
|
1212
|
-ADVANCED_EXCLUDE_TCP="113,139,70,80,443,587,143,6697,993,5060,5061,25,465,22,5222,5223,5269,5280,5281,8432,8433,8444"
|
|
|
|
|
1212
|
+ADVANCED_EXCLUDE_TCP="113,139,70,80,443,587,143,6697,993,5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
1213
|
ADVANCED_EXCLUDE_UDP="520,138,137,67,70,80,443,143,6697,993, 5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
1213
|
ADVANCED_EXCLUDE_UDP="520,138,137,67,70,80,443,143,6697,993, 5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
1214
|
|
1214
|
|
1215
|
SCAN_TRIGGER="2"
|
1215
|
SCAN_TRIGGER="2"
|
|
|
|
|
1269
|
iptables -A INPUT -p tcp --destination-port 9050 -j DROP
|
1269
|
iptables -A INPUT -p tcp --destination-port 9050 -j DROP
|
1270
|
iptables -A INPUT -p tcp --destination-port 3000 -j DROP
|
1270
|
iptables -A INPUT -p tcp --destination-port 3000 -j DROP
|
1271
|
iptables -A INPUT -p tcp --destination-port 3306 -j DROP
|
1271
|
iptables -A INPUT -p tcp --destination-port 3306 -j DROP
|
|
|
1272
|
+iptables -A INPUT -p tcp --destination-port 8432 -j DROP
|
|
|
1273
|
+iptables -A INPUT -p tcp --destination-port 8433 -j DROP
|
1272
|
iptables -A INPUT -p udp --destination-port 1 -j DROP
|
1274
|
iptables -A INPUT -p udp --destination-port 1 -j DROP
|
1273
|
iptables -A INPUT -p udp --destination-port 7 -j DROP
|
1275
|
iptables -A INPUT -p udp --destination-port 7 -j DROP
|
1274
|
iptables -A INPUT -p udp --destination-port 109:111 -j DROP
|
1276
|
iptables -A INPUT -p udp --destination-port 109:111 -j DROP
|
|
|
|
|
1348
|
# Limit Bitmessage connections
|
1350
|
# Limit Bitmessage connections
|
1349
|
iptables -A INPUT -p tcp --dport 8444 -m limit --limit 3/minute --limit-burst 1 -j ACCEPT
|
1351
|
iptables -A INPUT -p tcp --dport 8444 -m limit --limit 3/minute --limit-burst 1 -j ACCEPT
|
1350
|
|
1352
|
|
1351
|
-# Limit Convergence notary
|
|
|
1352
|
-iptables -A INPUT -p tcp --dport 8432:8433 -m limit --limit 3/minute --limit-burst 1 -j ACCEPT
|
|
|
1353
|
-
|
|
|
1354
|
# Limit the number of incoming tcp connections
|
1353
|
# Limit the number of incoming tcp connections
|
1355
|
# Interface 0 incoming syn-flood protection
|
1354
|
# Interface 0 incoming syn-flood protection
|
1356
|
iptables -N syn_flood
|
1355
|
iptables -N syn_flood
|
|
|
|
|
7497
|
| XMPP (server) | 5269 |
|
7496
|
| XMPP (server) | 5269 |
|
7498
|
| XMPP (BOSH) | 5280..5281 |
|
7497
|
| XMPP (BOSH) | 5280..5281 |
|
7499
|
| Bitmessage | 8444 |
|
7498
|
| Bitmessage | 8444 |
|
7500
|
-| Convergence | 8432..8433 |
|
|
|
7501
|
|
7499
|
|
7502
|
* Hints and Tips
|
7500
|
* Hints and Tips
|
7503
|
** Example configurations
|
7501
|
** Example configurations
|