Forum Debian Users Gang

#! /bin/sh

case "$1" in
start) 
echo "Firewall START"
# czyszczenie starych regul
iptables -F
iptables -X
# ustawienie polityki dzialania
iptables -P INPUT DROP
iptables -P OUTPUT ACCEPT
# Przepusc wszystko na loopbacku
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
# polaczenia nawiazane
iptables -A OUTPUT -p tcp -j LOG --log-level debug --log-prefix OOOOOOOOOO -m state --state ESTABLISHED,RELATED
iptables -A INPUT -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p tcp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A INPUT -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p udp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A INPUT -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
iptables -A OUTPUT -p icmp -j ACCEPT -m state --state ESTABLISHED,RELATED
#ftp
iptables -A INPUT -p tcp --dport 113 -j REJECT --reject-with icmp-port-unreachable
;;
stop)
echo "Firewall STOP"
# czyszczenie starych regul
iptables -F
iptables -X
;;
restart)
echo "Firewall RESTART"
$0 stop
$0 start
;;
esac