Debian - Iptables

Настраиваем iptables в Debian, выжимка из этого документа.

~# cat > /etc/iptables.up.rules
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -d 127.0.0.0/8 -i ! lo -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 1/sec -j ACCEPT
-A INPUT -p tcp -m tcp --sport 1024:65535 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT
-A INPUT -p tcp -m multiport --dports 22,53,80,20,21,443 -j ACCEPT
-A INPUT -p udp -m multiport --dports 22,53 -j ACCEPT
COMMIT

~# mkdir -p /etc/network/if-pre-up.d/    

~# cat > /etc/network/if-pre-up.d/iptables
#!/bin/bash
/sbin/iptables-restore < /etc/iptables.up.rules

~# chmod +x /etc/network/if-pre-up.d/iptables
~# /etc/network/if-pre-up.d/iptables