mirror of
https://github.com/inspec/inspec
synced 2024-11-15 01:17:08 +00:00
db8e6e7415
Signed-off-by: Ryan Davis <zenspider@chef.io>
6 lines
297 B
Text
6 lines
297 B
Text
-P INPUT DROP
|
|
-P FORWARD DROP
|
|
-P OUTPUT ACCEPT
|
|
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m tcp --dport 80 -m state --state NEW -m comment --comment "http like its 1990" -j ACCEPT
|