edwin
/
mailcow-dockerized-proxy
mirror of https://github.com/practical-engelbart/mailcow-dockerized-proxy.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Update rules6.conf

Browse Source
master
Edwin Lyon 5 years ago committed by GitHub
parent 47e5357e79
commit 1fc25c760d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 12 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Unified View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 23
      iptables/rules6.conf

23
iptables/rules6.conf
Unescape View File

@ -12,23 +12,22 @@
-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 5/sec -j ACCEPT -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -m limit --limit 5/sec -j ACCEPT
-A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 5/sec -j ACCEPT -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -m limit --limit 5/sec -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP -A INPUT -m conntrack --ctstate INVALID -j DROP
-A INPUT -i ens3 -m conntrack --ctstate NEW -p tcp -m multiport --dports 80,443,8448 -j ACCEPT
-A INPUT -i ens3 -m conntrack --ctstate NEW -p udp -m multiport --dports 51820:51821 -j ACCEPT
-A INPUT -j FILTERS -A INPUT -j FILTERS
-A INPUT -j REJECT -A INPUT -j REJECT
-A OUTPUT -o lo -j ACCEPT -A OUTPUT -o lo -j ACCEPT
-A OUTPUT -o ens3 -j ACCEPT -A OUTPUT -o ens3 -j ACCEPT
-A DOCKER-USER -i ens3 -j FILTERS -A DOCKER-USER -i ens3 -j FILTERS
-A FILTERS -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A FILTERS -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 25 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 25 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 80 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 80 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 110 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 110 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 143 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 143 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 443 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 443 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 465 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 465 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 587 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 587 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 993 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 993 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 995 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 995 -j ACCEPT
-A FILTERS -m conntrack --ctstate NEW -p tcp --dport 4190 -j ACCEPT -A FILTERS -m conntrack --ctstate NEW -p tcp --syn --dport 4190 -j ACCEPT
-A FILTERS -m conntrack --ctstate INVALID -j DROP -A FILTERS -m conntrack --ctstate INVALID -j DROP
-A FILTERS -j REJECT
COMMIT COMMIT

Write Preview
Loading…
Cancel
Save