mirror of
https://github.com/inspec/inspec
synced 2024-12-21 02:23:13 +00:00
e184347c6d
this is not broken; but it should stay not broken ;)
6 lines
297 B
Text
6 lines
297 B
Text
-P INPUT DROP
|
|
-P FORWARD DROP
|
|
-P OUTPUT ACCEPT
|
|
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT
|
|
-A INPUT -i eth0 -p tcp -m tcp --dport 80 -m state --state NEW -m comment --comment "http like its 1990" -j ACCEPT
|