Linux的基本iptables配置

What is a good basic iptables config?

什么是好的iptables基本配置？

Basic rules needed:

需要的基本规则：

• SSH but blocks all others.SSH的传入TCP到22，但阻止所有其他TCP。
• Allow outgoing TCP/UDP connections.
  允许传出TCP / UDP连接。

You may consider using the following rules as a start:

您可以考虑使用以下规则作为开始 ：

for tables in iptables ip6tables ; do
    # Flush existing rules
    $tables -F

    #Default policy
    $tables -P INPUT DROP
    $tables -P FORWARD ACCEPT
    $tables -P OUTPUT ACCEPT

    # Allow established inbound connections
    $tables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

    # Allow icmp
    $tables -A INPUT -p icmp -j ACCEPT

    # Allow all loopback traffic
    $tables -A INPUT -i lo -j ACCEPT

    # Allow inbound SSH connection
    $tables -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
done

Answered by Eric Z Ma.

埃里克·马（Eric Z Ma）回答。

翻译自: https://www.systutorials.com/basic-iptables-configuration-for-linux/