diff --git a/debian/resources/iptables.sh b/debian/resources/iptables.sh index 749948e..42c3aed 100755 --- a/debian/resources/iptables.sh +++ b/debian/resources/iptables.sh @@ -4,22 +4,18 @@ echo "Configure IPTables" #run iptables commands -iptables -N sip -iptables -A sip -j DROP -m string --string "friendly-scanner" --algo bm -iptables -A sip -j DROP -m string --string "sipcli/" --algo bm -iptables -A sip -j DROP -m string --string "VaxSIPUserAgent" --algo bm -iptables -A sip -j DROP -m string --string "sipvicious" --algo bm -iptables -A sip -j ACCEPT iptables -A INPUT -i lo -j ACCEPT -iptables -A INPUT -j sip -p tcp -m multiport --dports 5060,5061,5080,5081 -m comment --comment "SIP tcp" -iptables -A INPUT -j sip -p udp -m multiport --dports 5060,5061,5080,5081 -m comment --comment "SIP udp" -iptables -A INPUT -j ACCEPT -m state --state ESTABLISHED,RELATED -iptables -A INPUT -j ACCEPT -p tcp --dport 22 -m comment --comment "ssh" -iptables -A INPUT -j ACCEPT -p tcp --dport 80 -m comment --comment "http" -iptables -A INPUT -j ACCEPT -p tcp --dport 443 -m comment --comment "https" -iptables -A INPUT -j ACCEPT -p udp --dport 16384:32768 -m comment --comment "SIP RTP" -iptables -A INPUT -j ACCEPT -p icmp --icmp-type echo-request -iptables -A INPUT -j ACCEPT -p udp --dport 1194 -m comment --comment "OpenVPN" +iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT +iptables -A INPUT -p tcp --dport 22 -j ACCEPT +iptables -A INPUT -p tcp --dport 80 -j ACCEPT +iptables -A INPUT -p tcp --dport 443 -j ACCEPT +iptables -A INPUT -p tcp --dport 5060:5069 -j ACCEPT +iptables -A INPUT -p udp --dport 5060:5069 -j ACCEPT +iptables -A INPUT -p tcp --dport 5080 -j ACCEPT +iptables -A INPUT -p udp --dport 5080 -j ACCEPT +iptables -A INPUT -p udp --dport 16384:32768 -j ACCEPT +iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT +iptables -A INPUT -p udp --dport 1194 -j ACCEPT iptables -P INPUT DROP iptables -P FORWARD DROP iptables -P OUTPUT ACCEPT