RE: CLOSING a web server!!!!!!

["charlie" <charlesk@generalpants.com.au>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

try the attached script...
replace $YOUR_FIXED_IP with your static ip address.
you may want to add rate limiting to the logging rules to avoid log
flooding.( or comment them out entirely)

have fun

charlie



- - -----Original Message-----
From: Iñaki Martínez [mailto:debian@euskal-linux.org]
Sent: Friday, January 31, 2003 2:18 AM
To: Debian Firewall
Subject: CLOSING a web server!!!!!!


Hi!!!

 I want to close a Web server almost ALL!!!

 I only need:

  21 -> only from my fix IP
  22 -> only from my fix IP
  53 -> any IP (only for my domains = BIND config)
  80 -> any IP obiously
 443 -> same as 80


 What are the BETTER and MORE SECURE iptables rules for this
server????


 Thanks in advance......


 NOTE: i am NOT an expert, but i know iptables syntax, options and
rules.



-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBPjoOkeKOnQxUO+5DEQLCXwCgzlxQkhbkt8g8S2dM00KmJ0ffO34AnRPL
5aGfb5FnLpl50draA2nxTlZR
=c+s+
-----END PGP SIGNATURE-----