iptables 방화벽 실행 스크립트

iptables 방화벽 스크립트.

=========================================================
#!/bin/bash

IPTABLES=/sbin/iptables

echo 1 >/proc/sys/net/ipv4/tcp_syncookies
echo 1 >/proc/sys/net/ipv4/icmp_echo_ignore_broadcasts

if [ -e /proc/sys/net/ipv4/conf/all/rp_filter ]; then
for f in /proc/sys/net/ipv4/conf/*/rp_filter; do
echo 1 > $f
done
fi
$IPTABLES -F INPUT
$IPTABLES -F OUTPUT
$IPTABLES -A INPUT -i lo -j ACCEPT
$IPTABLES -A OUTPUT -o lo -j ACCEPT

$IPTABLES -A INPUT -m state –state INVALID -j DROP
$IPTABLES -A OUTPUT -m state –state INVALID -j DROP

$IPTABLES -A INPUT -p tcp -m state –state ESTABLISHED,RELATED -j ACCEPT

$IPTABLES -A INPUT -p tcp –dport 20:22 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 25 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 53 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 80 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 110 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 143 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 443 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 953 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 3306 -m state –state NEW,ESTABLISHED -j ACCEPT
$IPTABLES -A INPUT -p tcp –dport 8080 -m state –state NEW,ESTABLISHED -j ACCEPT

$IPTABLES -A INPUT -p tcp -j DROP
$IPTABLES -A OUTPUT -p tcp –dport 6666:6667 -j DROP

=========================================================