mirror of
https://github.com/inspec/inspec
synced 2024-11-23 21:23:29 +00:00
db8e6e7415
Signed-off-by: Ryan Davis <zenspider@chef.io>
6 lines
300 B
Text
6 lines
300 B
Text
-P INPUT DROP
|
|
-P FORWARD DROP
|
|
-P OUTPUT ACCEPT
|
|
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m tcp --dport 80 -m state --state NEW -m comment --comment "http-v6 like its 1990" -j ACCEPT
|