Changeset 13 in lab for trunk/iptables/ufw

Timestamp:

Jul 5, 2009 12:58:46 PM (15 years ago)

Author:

mitty

Message:

• NEW setfilter now sets nat table
  • this feature clashes with setnapt.sh because both of them reset nat table
  • do not use them (setfilter and setnapt.sh) at the same same time
• accept connections to local services from WAN
  • ACCEPT and REDIRECT examples

Location:

trunk/iptables/ufw

Files:

• after.rules (modified) (1 diff)
• nat.rules (added)

trunk/iptables/ufw/after.rules

@@ -16 +16 @@
 # End required lines
 
+## allow connections to the local services from WAN
+# ssh 22/tcp
+-A ufw-after-input -p tcp --syn -m state --state NEW --dport 22 -j ACCEPT
+# https 443/tcp
+-A ufw-after-input -p tcp --syn -m state --state NEW --dport 443 -j ACCEPT
+
 # don't log noisy services by default
 -A ufw-after-input -p udp --dport 137 -j RETURN