https://wiki.ixheim.de/index.php?action=history&feed=atom&title=Iptables_Grundger%C3%BCst_eine_Skriptes
Iptables Grundgerüst eine Skriptes - Versionsgeschichte
2026-06-29T09:41:01Z
Versionsgeschichte dieser Seite in Xinux Wiki
MediaWiki 1.35.1
https://wiki.ixheim.de/index.php?title=Iptables_Grundger%C3%BCst_eine_Skriptes&diff=35052&oldid=prev
Thomas.will am 8. September 2022 um 20:29 Uhr
2022-09-08T20:29:14Z
<p></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="de">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 8. September 2022, 20:29 Uhr</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l35" >Zeile 35:</td>
<td colspan="2" class="diff-lineno">Zeile 35:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> stop)</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> stop)</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> echo "stoppe firewall"</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> echo "stoppe firewall"</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> <span style="color:#000FFF">#Firewall komplett stoppen</span></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> <span style="color:#000FFF">##flushen der Regeln</span></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -F</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -F</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> iptables -F -t nat</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> iptables -F -t mangle</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> <span style="color:#000FFF">##löscht eigene Ketten</span></ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> iptables -X</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> iptables -X -t nat</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> iptables -X -t mangle </ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> <span style="color:#000FFF">##Default Policy setzen</span></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -P INPUT ACCEPT</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -P INPUT ACCEPT</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -P OUTPUT ACCEPT</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -P OUTPUT ACCEPT</div></td></tr>
</table>
Thomas.will
https://wiki.ixheim.de/index.php?title=Iptables_Grundger%C3%BCst_eine_Skriptes&diff=35051&oldid=prev
Thomas.will am 8. September 2022 um 20:27 Uhr
2022-09-08T20:27:37Z
<p></p>
<table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface">
<col class="diff-marker" />
<col class="diff-content" />
<col class="diff-marker" />
<col class="diff-content" />
<tr class="diff-title" lang="de">
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td>
<td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 8. September 2022, 20:27 Uhr</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l26" >Zeile 26:</td>
<td colspan="2" class="diff-lineno">Zeile 26:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> <span style="color:#000FFF">##Verkehr über das loopback device freischalten</span></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> <span style="color:#000FFF">##Verkehr über das loopback device freischalten</span></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -A INPUT -i lo -m state --state NEW -j ACCEPT</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -A INPUT -i lo -m state --state NEW -j ACCEPT</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> <span style="color:#000FFF">##Verkehr zum Rechner ZUM TCP PORT 22 erlauben</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div> <span style="color:#000FFF">##Verkehr zum Rechner ZUM TCP PORT 22 erlauben<ins class="diffchange diffchange-inline"></span></ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPT</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPT</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> <span style="color:#000FFF">##Logging der Ketten vor dem Ablehnen der Pakete</span></div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div> <span style="color:#000FFF">##Logging der Ketten vor dem Ablehnen der Pakete</span></div></td></tr>
<!-- diff cache key my_wiki:diff::1.12:old-35050:rev-35051 -->
</table>
Thomas.will
https://wiki.ixheim.de/index.php?title=Iptables_Grundger%C3%BCst_eine_Skriptes&diff=35050&oldid=prev
Thomas.will: Die Seite wurde neu angelegt: „ #!/bin/bash case $1 in start) <span style="color:#000FFF">#Variablen</span> LANDEV="ens19" WANDEV="eth0" echo "starte firewall" <span style="color:#000…“
2022-09-08T20:27:20Z
<p>Die Seite wurde neu angelegt: „ #!/bin/bash case $1 in start) <span style="color:#000FFF">#Variablen</span> LANDEV="ens19" WANDEV="eth0" echo "starte firewall" <span style="color:#000…“</p>
<p><b>Neue Seite</b></p><div> #!/bin/bash<br />
case $1 in<br />
start)<br />
<span style="color:#000FFF">#Variablen</span><br />
LANDEV="ens19"<br />
WANDEV="eth0"<br />
echo "starte firewall"<br />
<span style="color:#000FFF">##flushen der Regeln</span><br />
iptables -F<br />
iptables -F -t nat<br />
iptables -F -t mangle<br />
<span style="color:#000FFF">##löscht eigene Ketten</span><br />
iptables -X<br />
iptables -X -t nat<br />
iptables -X -t mangle <br />
<span style="color:#000FFF">##Default Policy setzen</span><br />
iptables -P INPUT DROP<br />
iptables -P OUTPUT DROP<br />
iptables -P FORWARD DROP<br />
<span style="color:#000FFF">##Connection Tracking</span><br />
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT<br />
iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT<br />
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT<br />
<span style="color:#000FFF">##Verkehr von Rechner hinaus freischalten</span><br />
iptables -A OUTPUT -m state --state NEW -j ACCEPT<br />
<span style="color:#000FFF">##Verkehr über das loopback device freischalten</span><br />
iptables -A INPUT -i lo -m state --state NEW -j ACCEPT<br />
<span style="color:#000FFF">##Verkehr zum Rechner ZUM TCP PORT 22 erlauben<br />
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -j ACCEPT<br />
<span style="color:#000FFF">##Logging der Ketten vor dem Ablehnen der Pakete</span><br />
iptables -A INPUT -j LOG --log-prefix "--iptables-drop-in--"<br />
iptables -A OUTPUT -j LOG --log-prefix "--iptables-drop-out--"<br />
iptables -A FORWARD -j LOG --log-prefix "--iptables-drop-for--"<br />
;;<br />
stop)<br />
echo "stoppe firewall"<br />
iptables -F<br />
iptables -P INPUT ACCEPT<br />
iptables -P OUTPUT ACCEPT<br />
iptables -P FORWARD ACCEPT<br />
;;<br />
esac</div>
Thomas.will