Tag Info

New answers tagged

1

block all pass in on fxp0 proto tcp from any to any port 22 flags S/SA pass out on fxp0 proto tcp from any to any port 22 flags S/SA Please consider you have to change fxp0 to your ethernet according to your operating OS. Reverse of above: pass in on fxp0 proto tcp from any to any port < 22 flags S/SA pass out on fxp0 proto tcp from any to any port ...


0

You shouldn't allow incoming connections to port :443, on other distributions I've used /usr/sbin/iptables rules-to-allow-only-ougoing-on-port-:443. Only allow incoming connection if you're client requires that otherwise I wouldn't bother with it. Keep in mind that allowing necessary incoming ports exposes security breach especially if the server is ...



Top 50 recent answers are included