jdmedeiros icon

IPTables GRSI

jdmedeiros | PRO | 02/19/19 02:32:34 PM UTC | 0 ⭐ | 145 👁️ | Never ⏰ | []
text |

2.8 KB

|

None

|

0 👍

/

0 👎

 ################# LIS ###################
 root@lis:/home/luxadmin# cat /etc/iptables/rules.v4
# Generated by iptables-save v1.6.0 on Tue Feb 19 10:42:16 2019
*nat
:PREROUTING ACCEPT [5:300]
:INPUT ACCEPT [4:240]
:OUTPUT ACCEPT [2090:148328]
:POSTROUTING ACCEPT [2:144]
-A PREROUTING -d 3.0.0.4/32 -i ens33 -p tcp -m tcp --dport 80 -j DNAT --to-destination 3.0.0.2
-A PREROUTING -d 3.0.0.5/32 -i ens33 -p tcp -m tcp --dport 443 -j DNAT --to-destination 3.0.0.2
-A PREROUTING -d 3.0.0.6/32 -i ens33 -p tcp -m multiport --dports 20,21 -j DNAT --to-destination 3.0.0.2
-A POSTROUTING -o ens33 -j SNAT --to-source 3.0.0.2
COMMIT
# Completed on Tue Feb 19 10:42:16 2019
# Generated by iptables-save v1.6.0 on Tue Feb 19 10:42:16 2019
*filter
:INPUT ACCEPT [0:0]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i ens34 -p tcp -m tcp --dport 22 -j REJECT --reject-with icmp-port-unreachable
-A INPUT -i ens34 -j ACCEPT
-A INPUT -i ens33 -p tcp -m multiport --dports 20,21,80,443 -j ACCEPT
-A INPUT -i ens33 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ens34 -o ens33 -p tcp -m multiport --dports 22,443 -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i ens34 -o ens33 -j ACCEPT
-A OUTPUT -o ens34 -p tcp -m tcp --dport 22 -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -o ens34 -j ACCEPT
-A OUTPUT -o ens33 -p tcp -m multiport --sports 21,80,443 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o ens33 -p tcp -m multiport --sports 20 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o ens33 -p tcp -m multiport --dports 22,443 -j REJECT --reject-with icmp-port-unreachable
-A OUTPUT -o ens33 -j ACCEPT
COMMIT
# Completed on Tue Feb 19 10:42:16 2019
 ################# PDL ###################
 luxadmin@pdl:~$ cat /etc/iptables/rules.v4
# Generated by iptables-save v1.6.0 on Tue Feb 19 11:15:02 2019
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [3:206]
:POSTROUTING ACCEPT [0:0]
-A PREROUTING -p tcp -m tcp --dport 22 -d 1.0.0.3 -j DNAT --to-destination 172.16.0.2:22
-A POSTROUTING -o ens33 -j MASQUERADE
COMMIT
# Completed on Tue Feb 19 11:15:02 2019
# Generated by iptables-save v1.6.0 on Tue Feb 19 11:15:02 2019
*filter
:INPUT DROP [3:253]
:FORWARD DROP [0:0]
:OUTPUT DROP [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -i ens34 -j ACCEPT
-A INPUT -i ens35 -j ACCEPT
-A INPUT -i ens33 -p tcp -m multiport --dports 22,443 -j ACCEPT
-A INPUT -i ens33 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i ens34 -o ens35 -j ACCEPT
-A FORWARD -i ens35 -o ens34 -j ACCEPT
-A FORWARD -o ens33 -j ACCEPT
-A FORWARD -i ens33 -m state --state RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o ens35 -j ACCEPT
-A OUTPUT -o ens34 -j ACCEPT
-A OUTPUT -o ens33 -j ACCEPT
COMMIT
# Completed on Tue Feb 19 11:15:02 2019

Comments