|
@@ -1101,8 +1101,8 @@ Uncomment the entry for *iptables support for Linux*
|
1101
|
1101
|
Set the following properties:
|
1102
|
1102
|
|
1103
|
1103
|
#+BEGIN_SRC: bash
|
1104
|
|
-TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
|
1105
|
|
-UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
|
|
1104
|
+TCP_PORTS="1,7,9,11,15,79,109,110,111,119,138,139,512,513,514,515,540,635,1080,1524,2000,2001,3000,4000,4001,5742,6000,6001,6667,12345,12346,20034,27665,30303,32771,32772,32773,32774,31337,40421,40425,49724,54320"
|
|
1105
|
+UDP_PORTS="1,7,9,66,67,68,69,111,137,138,161,162,474,513,517,518,635,640,641,666,700,2049,3000,31335,27444,34555,32770,32771,32772,32773,32774,31337,54321"
|
1106
|
1106
|
|
1107
|
1107
|
ADVANCED_EXCLUDE_TCP="113,139,70,80,443,587,143,6697,993,5060,5061,25,465,22,5222,5223,5269,5280,5281,8432,8433,8444"
|
1108
|
1108
|
ADVANCED_EXCLUDE_UDP="520,138,137,67,70,80,443,143,6697,993, 5060,5061,25,465,22,5222,5223,5269,5280,5281,8444"
|
|
@@ -1164,6 +1164,7 @@ iptables -A INPUT -p tcp --destination-port 137 -j DROP
|
1164
|
1164
|
iptables -A INPUT -p tcp --destination-port 3306 -j DROP
|
1165
|
1165
|
iptables -A INPUT -p tcp --destination-port 4242 -j DROP
|
1166
|
1166
|
iptables -A INPUT -p tcp --destination-port 9050 -j DROP
|
|
1167
|
+iptables -A INPUT -p tcp --destination-port 3000 -j DROP
|
1167
|
1168
|
iptables -A INPUT -p udp --destination-port 1 -j DROP
|
1168
|
1169
|
iptables -A INPUT -p udp --destination-port 7 -j DROP
|
1169
|
1170
|
iptables -A INPUT -p udp --destination-port 109:111 -j DROP
|
|
@@ -1190,6 +1191,7 @@ iptables -A INPUT -p udp --destination-port 8433 -j DROP
|
1190
|
1191
|
iptables -A INPUT -p udp --destination-port 3306 -j DROP
|
1191
|
1192
|
iptables -A INPUT -p udp --destination-port 4242 -j DROP
|
1192
|
1193
|
iptables -A INPUT -p udp --destination-port 9050 -j DROP
|
|
1194
|
+iptables -A INPUT -p udp --destination-port 3000 -j DROP
|
1193
|
1195
|
|
1194
|
1196
|
# Make sure NEW incoming tcp connections are SYN packets
|
1195
|
1197
|
iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP
|