[olug] help with iptables firewall

Ryan Stille ryan at cfwebtools.com
Tue Jul 24 16:16:38 UTC 2007


I have a server that has 1 physical network interface.  It has an 
internal IP address on our network.  I want to add a public IP as an ip 
alias, then we'll set that IP up in our router as a DMZ.  So I need to 
setup a firewall on the local machine to block most ports on the public 
IP.  I've come up with this:

iptables -F
iptables -A INPUT -p TCP -d $PUB_IP -s 0/0 --destination-port 80 -j ACCEPT
iptables -A INPUT -p ALL -d $PUB_IP -j DROP

It appears to work.  Am I missing something?

Thanks,
-Ryan






More information about the OLUG mailing list