Skip to content

Instantly share code, notes, and snippets.

@mmalmeida
Created July 5, 2013 12:08
Show Gist options
  • Select an option

  • Save mmalmeida/5934113 to your computer and use it in GitHub Desktop.

Select an option

Save mmalmeida/5934113 to your computer and use it in GitHub Desktop.
iptables
# Generated by iptables-save v1.4.12 on Fri Jul 5 13:07:43 2013
*raw
:PREROUTING ACCEPT [1196585836:168682354246]
:OUTPUT ACCEPT [1201887532:172170812884]
COMMIT
# Completed on Fri Jul 5 13:07:43 2013
# Generated by iptables-save v1.4.12 on Fri Jul 5 13:07:43 2013
*nat
:PREROUTING ACCEPT [826810:62650151]
:INPUT ACCEPT [826341:62622011]
:OUTPUT ACCEPT [5208038:1272452770]
:POSTROUTING ACCEPT [5208038:1272452770]
COMMIT
# Completed on Fri Jul 5 13:07:43 2013
# Generated by iptables-save v1.4.12 on Fri Jul 5 13:07:43 2013
*mangle
:PREROUTING ACCEPT [1196585836:168682354246]
:INPUT ACCEPT [1196585832:168682352898]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1201887532:172170812884]
:POSTROUTING ACCEPT [1201887532:172170812884]
COMMIT
# Completed on Fri Jul 5 13:07:43 2013
# Generated by iptables-save v1.4.12 on Fri Jul 5 13:07:43 2013
*filter
:INPUT ACCEPT [1265:127394]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [10400:9410496]
:fail2ban-apache - [0:0]
:fail2ban-apache-noscript - [0:0]
:fail2ban-apache-overflows - [0:0]
:fail2ban-sasl - [0:0]
:fail2ban-ssh - [0:0]
:fail2ban-vsftpd - [0:0]
-A INPUT -p tcp -m multiport --dports 25,465,143,220,993,110,995 -j fail2ban-sasl
-A INPUT -p tcp -m multiport --dports 21,20,990,989 -j fail2ban-vsftpd
-A INPUT -p tcp -m multiport --dports 80,443 -j fail2ban-apache-overflows
-A INPUT -p tcp -m multiport --dports 80,443 -j fail2ban-apache-noscript
-A INPUT -p tcp -m multiport --dports 80,443 -j fail2ban-apache
-A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh
-A INPUT -i eth0 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -i eth0 -p tcp -m tcp --dport 8080 -j ACCEPT
-A INPUT -s 94.23.4.77/32 -j DROP
-A INPUT -s 91.121.91.19/32 -j DROP
-A INPUT -s 94.23.4.77/32 -j DROP
-A INPUT -s 91.121.91.19/32 -j DROP
-A INPUT -s 91.121.222.17/32 -j DROP
-A INPUT -s 91.121.91.19/32 -j DROP
-A INPUT -s 91.121.91.19/32 -j DROP
-A INPUT -s 91.121.4.141/32 -j DROP
-A INPUT -s 91.121.91.19/32 -j DROP
-A INPUT -s 91.121.4.141/32 -j DROP
-A fail2ban-apache -j RETURN
-A fail2ban-apache-noscript -j RETURN
-A fail2ban-apache-overflows -j RETURN
-A fail2ban-sasl -j RETURN
-A fail2ban-ssh -j RETURN
-A fail2ban-vsftpd -j RETURN
COMMIT
# Completed on Fri Jul 5 13:07:43 2013
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment