You are on page 1of 1

#!/bin/sh echo -n "Aplicando Reglas de Firewall...

\n" echo -n "Estableciendo politicas para el firewall \n" /sbin/iptables -F /sbin/iptables -X /sbin/iptables -Z /sbin/iptables -t nat -F echo -n "Politicas por defecto DROP \n" /sbin/iptables -P INPUT DROP /sbin/iptables -P OUTPUT DROP /sbin/iptables -P FORWARD DROP echo -n "Acepar conexiones a localhost \n" /sbin/iptables -A INPUT -i lo -j ACCEPT /sbin/iptables -A OUTPUT -o lo -j ACCEPT echo -n "Permitir SSH desde el exterior \n" /sbin/iptables -A INPUT -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT /sbin/iptables -A OUTPUT -p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT echo -n "Permitir consultas DNS del router al exterior \n" /sbin/iptables -A OUTPUT -p udp --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT /sbin/iptables -A INPUT -p udp --sport 53 -m state --state ESTABLISHED -j ACCEPT /sbin/iptables -A OUTPUT -p tcp --dport 53 -m state --state NEW,ESTABLISHED -j ACCEPT /sbin/iptables -A INPUT -p tcp --sport 53 -m state --state ESTABLISHED -j ACCEPT echo -n "Permitir consultas http y https desde el router al exterior \n" /sbin/iptables -A OUTPUT -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT /sbin/iptables -A INPUT -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT /sbin/iptables -A OUTPUT -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT /sbin/iptables -A INPUT -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT echo -n "Cerrando los demas puertos \n" /sbin/iptables -A INPUT -s 0.0.0.0/0 -j DROP /sbin/iptables -A OUTPUT -s 0.0.0.0/0 -j DROP echo -n "Visualizar reglas iptables -nL \n" ###FIN###

You might also like