浏览代码

Not using Convergence

Bob Mottram 11 年前
父节点
当前提交
39a71d4db8
共有 1 个文件被更改,包括 3 次插入5 次删除
  1. 3
    5
      beaglebone.txt

+ 3
- 5
beaglebone.txt 查看文件

1209
 TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,3000,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
1209
 TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,3000,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
1210
 UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,3000,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
1210
 UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,3000,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
1211
 
1211
 
1212
-ADVANCED_EXCLUDE_TCP="113,139,70,80,443,587,143,6697,993,5060,5061,25,465,22,5222,5223,5269,5280,5281,8432,8433,8444"
1212
+ADVANCED_EXCLUDE_TCP="113,139,70,80,443,587,143,6697,993,5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
1213
 ADVANCED_EXCLUDE_UDP="520,138,137,67,70,80,443,143,6697,993, 5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
1213
 ADVANCED_EXCLUDE_UDP="520,138,137,67,70,80,443,143,6697,993, 5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
1214
 
1214
 
1215
 SCAN_TRIGGER="2"
1215
 SCAN_TRIGGER="2"
1269
 iptables -A INPUT -p tcp --destination-port 9050 -j DROP
1269
 iptables -A INPUT -p tcp --destination-port 9050 -j DROP
1270
 iptables -A INPUT -p tcp --destination-port 3000 -j DROP
1270
 iptables -A INPUT -p tcp --destination-port 3000 -j DROP
1271
 iptables -A INPUT -p tcp --destination-port 3306 -j DROP
1271
 iptables -A INPUT -p tcp --destination-port 3306 -j DROP
1272
+iptables -A INPUT -p tcp --destination-port 8432 -j DROP
1273
+iptables -A INPUT -p tcp --destination-port 8433 -j DROP
1272
 iptables -A INPUT -p udp --destination-port 1 -j DROP
1274
 iptables -A INPUT -p udp --destination-port 1 -j DROP
1273
 iptables -A INPUT -p udp --destination-port 7 -j DROP
1275
 iptables -A INPUT -p udp --destination-port 7 -j DROP
1274
 iptables -A INPUT -p udp --destination-port 109:111 -j DROP
1276
 iptables -A INPUT -p udp --destination-port 109:111 -j DROP
1348
 # Limit Bitmessage connections
1350
 # Limit Bitmessage connections
1349
 iptables -A INPUT -p tcp --dport 8444 -m limit --limit 3/minute --limit-burst 1 -j ACCEPT
1351
 iptables -A INPUT -p tcp --dport 8444 -m limit --limit 3/minute --limit-burst 1 -j ACCEPT
1350
 
1352
 
1351
-# Limit Convergence notary
1352
-iptables -A INPUT -p tcp --dport 8432:8433 -m limit --limit 3/minute --limit-burst 1 -j ACCEPT
1353
-
1354
 # Limit the number of incoming tcp connections
1353
 # Limit the number of incoming tcp connections
1355
 # Interface 0 incoming syn-flood protection
1354
 # Interface 0 incoming syn-flood protection
1356
 iptables -N syn_flood
1355
 iptables -N syn_flood
7497
 | XMPP (server) |       5269 |
7496
 | XMPP (server) |       5269 |
7498
 | XMPP (BOSH)   | 5280..5281 |
7497
 | XMPP (BOSH)   | 5280..5281 |
7499
 | Bitmessage    |       8444 |
7498
 | Bitmessage    |       8444 |
7500
-| Convergence   | 8432..8433 |
7501
 
7499
 
7502
 * Hints and Tips
7500
 * Hints and Tips
7503
 ** Example configurations
7501
 ** Example configurations