Beispiel: Rechner abschotten I



modprobe ip_tables

iptables -F
iptables -X block

iptables -P INPUT DROP
iptables -P FORWARD DROP

iptables -A INPUT -i lo -j ACCEPT

modprobe ip_conntrack
modprobe ip_conntrack_ftp

iptables -N block
iptables -A block -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A block -m state --state NEW -o eth0 -j ACCEPT
iptables -A block -p tcp --dport 113 -j REJECT
iptables -A INPUT -j block