Return to iptables.rules CVS log | Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / testing / hosts / default / etc |
1.1 misho 1: *filter 2: 3: # default policy is DROP 4: -P INPUT DROP 5: -P OUTPUT DROP 6: -P FORWARD DROP 7: 8: # allow esp 9: -A INPUT -i eth0 -p 50 -j ACCEPT 10: -A OUTPUT -o eth0 -p 50 -j ACCEPT 11: 12: # allow ah 13: -A INPUT -i eth0 -p 51 -j ACCEPT 14: -A OUTPUT -o eth0 -p 51 -j ACCEPT 15: 16: # allow IKE 17: -A INPUT -i eth0 -p udp --sport 500 --dport 500 -j ACCEPT 18: -A OUTPUT -o eth0 -p udp --dport 500 --sport 500 -j ACCEPT 19: 20: # allow MobIKE 21: -A INPUT -i eth0 -p udp --sport 4500 --dport 4500 -j ACCEPT 22: -A OUTPUT -o eth0 -p udp --dport 4500 --sport 4500 -j ACCEPT 23: 24: # allow ssh 25: -A INPUT -p tcp --dport 22 -j ACCEPT 26: -A OUTPUT -p tcp --sport 22 -j ACCEPT 27: 28: # allow crl fetch from winnetou 29: -A INPUT -i eth0 -p tcp --sport 80 -s 192.168.0.150 -j ACCEPT 30: -A OUTPUT -o eth0 -p tcp --dport 80 -d 192.168.0.150 -j ACCEPT 31: 32: COMMIT