edwin
/
mailcow-dockerized-proxy
mirror of https://github.com/practical-engelbart/mailcow-dockerized-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update rules4.conf

Browse Source
master
Edwin Lyon 4 years ago committed by GitHub
parent 1ba95d6be6
commit 0b9da1996c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 11 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 37
      iptables/rules4.conf

37
iptables/rules4.conf
Unescape View File

@ -6,20 +6,35 @@
:FILTERS - [0:0]
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i wg0 -m conntrack --ctstate NEW -p tcp --dport 22 -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 5/sec -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -i wg0 -m conntrack --ctstate NEW -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -i ens3 -m conntrack --ctstate NEW -p tcp -m multiport --dports 80,443,8448 -j ACCEPT
-A INPUT -i ens3 -m conntrack --ctstate NEW -p udp -m multiport --dports 51820:51821 -j ACCEPT
-A INPUT -j FILTERS
-A INPUT -j REJECT
-A DOCKER-USER -i eth0 -j FILTERS
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -m conntrack --ctstate INVALID -j DROP
-A FORWARD -p icmp -m icmp --icmp-type 8 -m limit --limit 5/sec -j ACCEPT
-A FORWARD -o eth0 -j FILTERS
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o wg-j ACCEPT
-A OUTPUT -o eth0-j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp -m multiport --dports 25,80,110,143,443,465,587,993,995,4190 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p udp -m multiport --dports 51820:51821 -j ACCEPT
-A FILTERS -j REJECT
-A OUTPUT -o ens3 -j ACCEPT
-A DOCKER-USER -i ens3 -j FILTERS
-A FILTERS -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 25 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 80 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 110 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 143 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 443 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 465 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 587 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 993 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 995 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 4190 -j ACCEPT
-A FILTERS -m conntrack --ctstate INVALID -j DROP
COMMIT
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o ens3 -j MASQUERADE
COMMIT

Write Preview
Loading…
Cancel
Save