edwin
/
mailcow-dockerized-proxy
mirror of https://github.com/practical-engelbart/mailcow-dockerized-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update rules4.conf

Browse Source
master
Edwin Lyon 4 years ago committed by GitHub
parent 953380ea39
commit 47e5357e79
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 14 additions and 16 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 30
      iptables/rules4.conf

30
iptables/rules4.conf
Unescape View File

@ -6,9 +6,9 @@
:FILTERS - [0:0]
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -i wg0 -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 5/sec -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -i wg0 -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -j FILTERS
-A INPUT -j REJECT
-A OUTPUT -o lo -j ACCEPT
@ -16,23 +16,22 @@
-A OUTPUT -o wg0 -j ACCEPT
-A DOCKER-USER -i ens3 -j FILTERS
-A FORWARD -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i wg0 -j ACCEPT
-A FORWARD -o wg0 -j ACCEPT
-A FORWARD -m conntrack --ctstate INVALD -j DROP
-A FORARD -i wg0 -o wg0 -m conntrack --ctstate NEW -j ACCEPT
-A FORWARD -j REJECT
-A FILTERS -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 25 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 80 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 110 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 143 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 443 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 465 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 587 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 993 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 995 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 4190 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 8448 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p udp --dport 51820 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 25 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 80 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 110 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 143 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 443 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 465 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 587 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 993 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 995 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 4190 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 8448 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p udp --syn --dport 51820 -j ACCEPT
-A FILTERS -m conntrack --ctstate INVALID -j DROP
-A FILTERS -j REJECT
COMMIT
@ -44,4 +43,3 @@ COMMIT
:POSTROUTING ACCEPT [0:0]
-A POSTROUTING -o ens3 -j MASQUERADE
COMMIT

Write Preview
Loading…
Cancel
Save