X-Git-Url: http://lab.mitty.jp/git/?a=blobdiff_plain;f=iptables%2Fufw%2Fafter.rules;fp=iptables%2Fufw%2Fafter.rules;h=0000000000000000000000000000000000000000;hb=8333ea00a9fe608c90c20af12ea0c51548f66f4e;hp=f98d8f1caae598a1e820d03122f7c15772a5aa35;hpb=920ad9e17feea13643c407944f9452b03bd45b6e;p=lab.git

diff --git a/iptables/ufw/after.rules b/iptables/ufw/after.rules
deleted file mode 100644
index f98d8f1..0000000
--- a/iptables/ufw/after.rules
+++ /dev/null
@@ -1,37 +0,0 @@
-#
-# rules.input-after
-#
-# Rules that should be run after the ufw command line added rules. Custom
-# rules should be added to one of these chains:
-#   ufw-after-input
-#   ufw-after-output
-#   ufw-after-forward
-#
-
-# Don't delete these required lines, otherwise there will be errors
-*filter
-:ufw-after-input - [0:0]
-:ufw-after-output - [0:0]
-:ufw-after-forward - [0:0]
-# End required lines
-
-## allow connections to the local services from WAN
-# ssh 22/tcp
--A ufw-after-input -p tcp --syn -m state --state NEW --dport 22 -j ACCEPT
-# https 443/tcp
--A ufw-after-input -p tcp --syn -m state --state NEW --dport 443 -j ACCEPT
-
-# don't log noisy services by default
--A ufw-after-input -p udp --dport 137 -j RETURN
--A ufw-after-input -p udp --dport 138 -j RETURN
--A ufw-after-input -p tcp --dport 139 -j RETURN
--A ufw-after-input -p tcp --dport 445 -j RETURN
--A ufw-after-input -p udp --dport 67 -j RETURN
--A ufw-after-input -p udp --dport 68 -j RETURN
-
-# catchall for logging
--A ufw-after-input -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK INPUT]: " --log-level err
--A ufw-after-forward -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[UFW BLOCK FORWARD]: " --log-level err
-
-# don't delete the 'COMMIT' line or these rules won't be processed
-COMMIT