Breaking News: Grepper is joining You.com. Read the official announcement!

iptables setup firewall to block unwated connections

ChrisLad answered on October 29, 2022 Popularity 10/10 Helpfulness 2/10

answer iptables setup firewall to block unwated connections

iptables setup firewall to block unwated connections

Comment

# Using Iptables isn't the most efficient way of doing this but I will
# share some useful rules to prevent unwanted connections efficiently
# and effectively.

# With Iptables, the raw chain is the earliest you can block traffic.
# Pairing this with the PREROUTING chain can be effective.

# Blocking your SSH port from outside connections except for your own ip
# is as easy as follows

# This accepts your IP address and allows for the next rule to 
# be added correctly

iptables -t raw -A PREROUTING -p tcp --cstate NEW,ESTABLISED -s YOUR_IP --dport 22 --comment "SSH Whitelist" -j ACCEPT

# This is the rule that blocks all other SSH connections outsite of 
# your own IP address, if you have not executed the command above
# your server will not allow you to connect.

iptables -t raw -A PREROUTING -p tcp --cstate NEW,RELATED,ESTABLISED --dport 22 --comment "SSH Blacklist" -j DROP

# If you have done this correctly, you shouldn't be able to connect 
# to ssh unless you are using the IP provided in the first iptable.

# BPF filters can also be used in order to make packet specific filters
# here is an example.

iptables -t raw -A PREROUTING -p udp --dport 53 -m bpf --bytecode "6,40 0 0 12,21 0 3 2048,48 0 0 23,21 0 1 17,6 0 0 65535,6 0 0 0," -j DROP

# This rule contains byte code which translates to "ip and udp"
# This basically means if the connection contains an ip and
# is connecting via udp, block it.
# You can get very specific with this. Here is an example
# if udp and port 53 and len <= 512 and host is host.
# This is a very intricate way to block connection but shouldn't be
# used unless you are aware of how to use it.\

# For more info about these subjects visit:
# https://biot.com/capstats/bpf.html
# https://linux.die.net/man/8/iptables

Popularity 10/10 Helpfulness 2/10 Language shell

Source: Grepper

Tags: block firewall linux server shell whitelist

Link to this answer
Share Copy Link

Contributed on Oct 29 2022

ChrisLad

0 Answers Avg Quality 2/10

iptables setup firewall to block unwated connections

Contents

More Related Answers

iptables setup firewall to block unwated connections

Grepper

Documentation

Social

Legal

Contact

Oops, You will need to install Grepper and log-in to perform this action.