72 lines
2.8 KiB
Plaintext
72 lines
2.8 KiB
Plaintext
*filter
|
|
:ufw-user-input - [0:0]
|
|
:ufw-user-output - [0:0]
|
|
:ufw-user-forward - [0:0]
|
|
:ufw-before-logging-input - [0:0]
|
|
:ufw-before-logging-output - [0:0]
|
|
:ufw-before-logging-forward - [0:0]
|
|
:ufw-user-logging-input - [0:0]
|
|
:ufw-user-logging-output - [0:0]
|
|
:ufw-user-logging-forward - [0:0]
|
|
:ufw-after-logging-input - [0:0]
|
|
:ufw-after-logging-output - [0:0]
|
|
:ufw-after-logging-forward - [0:0]
|
|
:ufw-logging-deny - [0:0]
|
|
:ufw-logging-allow - [0:0]
|
|
:ufw-user-limit - [0:0]
|
|
:ufw-user-limit-accept - [0:0]
|
|
### RULES ###
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 174.129.137.28 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206d696d69722e6974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 174.129.137.28 -j REJECT
|
|
|
|
### tuple ### reject any any 0.0.0.0/0 any 139.59.17.201 in comment=6279204661696c3242616e206166746572203120617474656d70747320616761696e7374206974677579732e636f6d2e62722d626164626f7473
|
|
-A ufw-user-input -s 139.59.17.201 -j REJECT
|
|
|
|
### tuple ### allow tcp 22 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 22 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 80 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 80 -j ACCEPT
|
|
|
|
### tuple ### allow any 443 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 443 -j ACCEPT
|
|
-A ufw-user-input -p udp --dport 443 -j ACCEPT
|
|
|
|
### tuple ### allow any any 0.0.0.0/0 any 172.16.254.11 in
|
|
-A ufw-user-input -s 172.16.254.11 -j ACCEPT
|
|
|
|
### tuple ### allow any any 0.0.0.0/0 any 172.16.254.125 in
|
|
-A ufw-user-input -s 172.16.254.125 -j ACCEPT
|
|
|
|
### tuple ### allow udp 443 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p udp --dport 443 -j ACCEPT
|
|
|
|
### tuple ### allow udp 80 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p udp --dport 80 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 10051 0.0.0.0/0 any 0.0.0.0/0 in
|
|
-A ufw-user-input -p tcp --dport 10051 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 6162 0.0.0.0/0 any 0.0.0.0/0 in comment=566565616d207472616e73706f72742072756c65
|
|
-A ufw-user-input -p tcp --dport 6162 -j ACCEPT
|
|
|
|
### tuple ### allow tcp 6160 0.0.0.0/0 any 0.0.0.0/0 in comment=566565616d206465706c6f796d656e742072756c65
|
|
-A ufw-user-input -p tcp --dport 6160 -j ACCEPT
|
|
|
|
### END RULES ###
|
|
|
|
### LOGGING ###
|
|
-A ufw-after-logging-forward -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
|
|
-I ufw-logging-deny -m conntrack --ctstate INVALID -j RETURN -m limit --limit 3/min --limit-burst 10
|
|
-A ufw-logging-deny -j LOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min --limit-burst 10
|
|
-A ufw-logging-allow -j LOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min --limit-burst 10
|
|
### END LOGGING ###
|
|
|
|
### RATE LIMITING ###
|
|
-A ufw-user-limit -m limit --limit 3/minute -j LOG --log-prefix "[UFW LIMIT BLOCK] "
|
|
-A ufw-user-limit -j REJECT
|
|
-A ufw-user-limit-accept -j ACCEPT
|
|
### END RATE LIMITING ###
|
|
COMMIT
|