Posts

Showing posts from April, 2014

IPTABLES GUIDE

***** SAMPLE DEFAULT IPTABLES file************************ # Firewall configuration written by system-config-firewall # Manual customization of this file is not recommended. *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [0:0] -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT -A INPUT -p icmp -j ACCEPT -A INPUT -p UDP -j ACCEPT -A INPUT -i lo -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT -A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT *********************************************************************** ********************IPTABLES Command line Examples ******************************************** Drop all Incoming ICMP ---------------------- iptables -A INPUT -p ICMP --icmp-type 8 -j DROP Drop all Outgoing ICMP ----------------------- iptables -A OUTPUT -p icmp --icmp-type echo-request -j DROP Allow
Required Repo's for CentOS 6.X EPEL : wget http://epel.mirror.net.in/epel/6/i386/epel-release-6-8.noarch.rpm rpm -Uvh epel-release-6-8.noarch.rpm RPMForge: ## RHEL/CentOS 6 32 Bit OS ## # wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.i686.rpm # rpm -Uvh rpmforge-release-0.5.2-2.el6.rf.i686.rpm ## RHEL/CentOS 6 64 Bit OS ## # wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm # rpm -Uvh rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm RPM Fusion: # rpm -Uvh http://download1.rpmfusion.org/free/el/updates/6/i386/rpmfusion-free-release-6-1.noarch.rpm # rpm -Uvh http://download1.rpmfusion.org/nonfree/el/updates/6/i386/rpmfusion-nonfree-release-6-1.noarch.rpm REMI: # wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm # rpm -Uvh remi-release-6.rpm