Click to See Complete Forum and Search --> : please review my iptables


ee99ee2
08-29-2002, 01:46 PM
Tell me what you think of my iptables firewall tables. All I did was install Debian, then install the ipmasq package so it would setup my ipmasqurading automaticly. Did it do a good job? I'm new to Linux firewalls, so tell me what you all think of what it did:

ned:/# iptables -L
Chain INPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
LOG all -- 127.0.0.0/8 anywhere LOG level warning
DROP all -- 127.0.0.0/8 anywhere
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- localnet/24 anywhere
ACCEPT !tcp -- anywhere BASE-ADDRESS.MCAST.NET/4
LOG all -- localnet/24 anywhere LOG level warning
DROP all -- localnet/24 anywhere
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- anywhere kpt-c-24-158-112-9.chartertn.net
ACCEPT all -- anywhere 255.255.255.255
LOG all -- anywhere anywhere LOG level warning
DROP all -- anywhere anywhere

Chain FORWARD (policy DROP)
target prot opt source destination
ACCEPT all -- localnet/24 anywhere
ACCEPT all -- anywhere localnet/24
LOG all -- anywhere localnet/24 LOG level warning
DROP all -- anywhere localnet/24
LOG all -- anywhere anywhere LOG level warning
DROP all -- anywhere anywhere

Chain OUTPUT (policy DROP)
target prot opt source destination
ACCEPT all -- anywhere anywhere
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- anywhere localnet/24
ACCEPT !tcp -- anywhere BASE-ADDRESS.MCAST.NET/4
LOG all -- anywhere localnet/24 LOG level warning
DROP all -- anywhere localnet/24
ACCEPT all -- anywhere 255.255.255.255
ACCEPT all -- kpt-c-24-158-112-9.chartertn.net anywhere
ACCEPT all -- 255.255.255.255 anywhere
LOG all -- anywhere anywhere LOG level warning
DROP all -- anywhere anywhere


-ee99ee2