![]() ![]() | ![]() |
Initial revision
*filter # default policy is DROP -P INPUT DROP -P OUTPUT DROP -P FORWARD DROP # allow ssh -A INPUT -p tcp --dport 22 -j ACCEPT -A OUTPUT -p tcp --sport 22 -j ACCEPT # allow crl fetch from winnetou -A INPUT -i eth0 -p tcp --sport 80 -s PH_IP_WINNETOU -j ACCEPT -A OUTPUT -o eth0 -p tcp --dport 80 -d PH_IP_WINNETOU -j ACCEPT COMMIT