Generated by iptables-save v1.4.21 on Wed Jul 27 16:50:41 2022
*nat
:PREROUTING ACCEPT [456898:118260308]
:INPUT ACCEPT [18779:2210998]
:OUTPUT ACCEPT [720194:132558748]
:POSTROUTING ACCEPT [720194:132558748]
COMMIT
# Completed on Wed Jul 27 16:50:41 2022
# Generated by iptables-save v1.4.21 on Wed Jul 27 16:50:41 2022
*filter
:INPUT ACCEPT [299:27265]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1043:296549]
:GRF - [0:0]
:ICMP - [0:0]
:NTP - [0:0]
:SNMPTRAP - [0:0]
:SQL - [0:0]
:SSH - [0:0]
:WEB - [0:0]
:ZBX - [0:0]
-A INPUT -i lo -j ACCEPT
-A INPUT -s 8.8.8.8/32 -p udp -m udp --sport 53 -j ACCEPT
-A INPUT -s 8.8.4.4/32 -p udp -m udp --sport 53 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 3306 -j GRF
-A INPUT -p icmp -j ICMP
-A INPUT -p udp -m udp --dport 123 -j NTP
-A INPUT -p tcp -m tcp --dport 20:22 -j SSH
-A INPUT -p tcp -m multiport --dports 10050,10051 -j ZBX
-A INPUT -p tcp -m multiport --dports 80,443 -j WEB
-A INPUT -p udp -m udp --dport 162 -j SNMPTRAP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -j DROP
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p udp -m state --state NEW -m udp --dport 22 -j ACCEPT
-A OUTPUT -p tcp -m tcp -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
-A OUTPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT
-A GRF -p tcp -m tcp --dport 3306 -j ACCEPT
-A ICMP -p icmp -m limit --limit 5/sec -j ACCEPT
-A SSH -p tcp -m tcp --dport 22 -j ACCEPT
-A WEB -p tcp -m multiport --dports 80,443 -j ACCEPT
-A WEB -p udp -m udp --dport 162 -j ACCEPT
-A ZBX -p tcp -m tcp --dport 10050 -j ACCEPT
-A ZBX -p tcp -m tcp --dport 10051 -j ACCEPT
COMMIT
# Completed on Wed Jul 27 16:50:41 2022
# Generated by iptables-save v1.4.21 on Wed Jul 27 16:50:41 2022
*raw
:PREROUTING ACCEPT [3212218793:382777265452]
:OUTPUT ACCEPT [3163375727:314564594355]
-A PREROUTING -p udp -m udp --sport 53 -j NOTRACK
-A OUTPUT -p udp -m udp --dport 53 -j NOTRACK
COMMIT
# Completed on Wed Jul 27 16:50:41 2022
в /etc/my.cnf [mysqld] bind-address = 0.0.0.0 #skip-networking
Иди в help linux
Обсуждают сегодня