Posiadam skrypt, który ma zablokować połączenia do usług takich jak FTP DA itd. innym ip prócz mojego.
Kod: Zaznacz cały
#!/bin/sh
1. chkconfig: 3 21 91
2. description: Firewall
IPT=/sbin/iptables
case "$1" in
start)
$IPT -A INPUT -i venet0:0 -p tcp --dport 21 --source xxxx -j ACCEPT
$IPT -A INPUT -i venet0:0 -p tcp --dport 22 --source xxxx -j ACCEPT
$IPT -A INPUT -i venet0:0 -p tcp --dport 53 -j ACCEPT
$IPT -A INPUT -i venet0:0 -p udp --dport 53 -j ACCEPT
$IPT -A INPUT -i venet0:0 -p tcp --dport 80 -j ACCEPT
$IPT -A INPUT -i venet0:0 -m state --state ESTABLISHED,RELATED -j ACCEPT
$IPT -A INPUT -i venet0:0 -j DROP
exit 0
Kod: Zaznacz cały
Warning: weird character in interface `venet0:0' (No aliases, :, ! or *).
Warning: weird character in interface `venet0:0' (No aliases, :, ! or *).
Warning: weird character in interface `venet0:0' (No aliases, :, ! or *).
Warning: weird character in interface `venet0:0' (No aliases, :, ! or *).