Answer the question
In order to leave comments, you need to log in
What should iptables look like on desktop?
Hello! Decided to secure my home computer. I just need internet access.
Here are the rules I made:
-P INPUT DROP
-P FORWARD DROP
-P OUTPUT DROP
-A INPUT -i enp2s0 -p udp -m udp --dport 80 -j ACCEPT
-A INPUT -i enp2s0 -p tcp -m tcp --dport 80 -j ACCEPT
-A INPUT -i enp2s0 -p udp -m udp --dport 443 -j ACCEPT
-A INPUT -i enp2s0 -p tcp -m tcp --dport 443 -j ACCEPT
-A INPUT -i enp2s0 -p udp -m udp --dport 53 -j ACCEPT
-A INPUT -i enp2s0 -p tcp -m tcp --dport 53 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 80 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 80 -j ACCEPT
-A OUTPUT -p udp -m udp --dport 443 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 443 -j ACCEPT
-A OUTPUT -p udp -m udp - -dport 53 -j ACCEPT
-A OUTPUT -p tcp -m tcp --dport 53 -j ACCEPT
Answer the question
In order to leave comments, you need to log in
Outgoing ports, allow all. More than 80 and 443 are used there, the same browsers open connections above port 40000. And something else that I can’t understand from my sleep)))
And you also need to allow incoming ports with one command and with state RELATED, ESTABLISHED
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question