Created
December 19, 2018 20:11
-
-
Save pentago/23ff417e4ddc7489a5acea22216daf70 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
*filter | |
:INPUT ACCEPT [0:0] | |
:FORWARD DROP [0:0] | |
:OUTPUT ACCEPT [0:0] | |
:FILTERS - [0:0] | |
:DOCKER-USER - [0:0] | |
-F INPUT | |
-F DOCKER-USER | |
-F FILTERS | |
-A INPUT -i lo -j ACCEPT | |
-A INPUT -p icmp --icmp-type any -j ACCEPT | |
-A INPUT -j FILTERS | |
-A DOCKER-USER -i enp0s31f6 -j FILTERS | |
-A FILTERS -m state --state ESTABLISHED,RELATED -j ACCEPT | |
# SSH | |
-A FILTERS -m state --state NEW -m tcp -p tcp --dport 44344 -j ACCEPT | |
# MySQL | |
-A FILTERS -m state --state NEW -m tcp -p tcp --dport 43306 -j ACCEPT | |
# CS:GO | |
-A FILTERS -m state --state NEW -m tcp -p tcp --dport 27015 -j ACCEPT | |
-A FILTERS -m state --state NEW -m udp -p udp --dport 27015 -j ACCEPT | |
-A FILTERS -m state --state NEW -m tcp -p tcp --dport 27020 -j ACCEPT | |
-A FILTERS -m state --state NEW -m udp -p udp --dport 27020 -j ACCEPT | |
-A FILTERS -j REJECT --reject-with icmp-host-prohibited | |
COMMIT |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment