edwin
/
mailcow-dockerized-proxy
mirror of https://github.com/practical-engelbart/mailcow-dockerized-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update rules6.conf

Browse Source
master
Edwin Lyon 4 years ago committed by GitHub
parent 0b9da1996c
commit 3475a0ee39
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 21 additions and 16 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 37
      iptables/rules6.conf

37
iptables/rules6.conf
Unescape View File

@ -6,24 +6,29 @@
:FILTERS - [0:0]
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i eth0 -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 5/sec -j ACCEPT
-A INPUT -i eth0 -p ipv6-icmp -m icmp6 --icmpv6-type 133 -m limit --limit 5/sec -j ACCEPT
-A INPUT -i eth0 -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m limit --limit 5/sec -j ACCEPT
-A INPUT -i eth0 -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 5/sec -j ACCEPT
-A INPUT -i eth0 -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 5/sec -j ACCEPT
-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 5/sec -j ACCEPT
-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 133 -m limit --limit 5/sec -j ACCEPT
-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 134 -m limit --limit 5/sec -j ACCEPT
-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 5/sec -j ACCEPT
-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 5/sec -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -i wg0 -m conntrack --ctstate NEW -p tcp -m tcp 22 -j ACCEPT
-A INPUT -i ens3 -m conntrack --ctstate NEW -p tcp -m multiport --dports 80,443,8448 -j ACCEPT
-A INPUT -i ens3 -m conntrack --ctstate NEW -p udp -m multiport --dports 51820:51821 -j ACCEPT
-A INPUT -j FILTERS
-A INPUT -j REJECT
-A DOCKER-USER -i eth0 -j FILTERS
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -m conntrack --ctstate INVALID -j DROP
-A FORWARD -p ipv6-icmp -m icmp6 --icmpv6-type 128 -m limit --limit 5/sec -j ACCEPT
-A FORWARD -o eth0 -j FILTERS
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o wg0 -j ACCEPT
-A OUTPUT -o eth0 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp -m multiport --dports 25,80,110,143,443,465,587,993,995,4190 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p udp -m multiport --dports 51820:51821 -j ACCEPT
-A FILTERS -j REJECT
-A OUTPUT -o ens3 -j ACCEPT
-A DOCKER-USER -i ens3 -j FILTERS
-A FILTERS -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 25 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 80 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 110 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 143 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 443 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 465 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 587 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 993 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 995 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 4190 -j ACCEPT
-A FILTERS -m conntrack --ctstate INVALID -j DROP
COMMIT

Write Preview
Loading…
Cancel
Save