From df18c4761abadb1dafebc360da1c84c2f4bb8182 Mon Sep 17 00:00:00 2001 From: DigiDaz Date: Thu, 5 May 2016 22:55:59 +0100 Subject: [PATCH] Add some essential rules --- debian/resources/iptables.sh | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/debian/resources/iptables.sh b/debian/resources/iptables.sh index 9f70728..5d3e6cb 100644 --- a/debian/resources/iptables.sh +++ b/debian/resources/iptables.sh @@ -4,6 +4,14 @@ echo "Configure IPTables" #run iptables commands +iptables -A INPUT -j DROP -p udp --dport 5060 -m string --string "friendly-scanner" --algo bm +iptables -A INPUT -j DROP -p udp --dport 5060 -m string --string "sipcli/" --algo bm +iptables -A INPUT -j DROP -p tcp --dport 5060 -m string --string "friendly-scanner" --algo bm +iptables -A INPUT -j DROP -p tcp --dport 5060 -m string --string "sipcli/" --algo bm +iptables -A INPUT -j DROP -p udp --dport 5080 -m string --string "friendly-scanner" --algo bm +iptables -A INPUT -j DROP -p udp --dport 5080 -m string --string "sipcli/" --algo bm +iptables -A INPUT -j DROP -p tcp --dport 5080 -m string --string "friendly-scanner" --algo bm +iptables -A INPUT -j DROP -p tcp --dport 5080 -m string --string "sipcli/" --algo bm iptables -A INPUT -i lo -j ACCEPT iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -p tcp --dport 22 -j ACCEPT @@ -23,4 +31,4 @@ iptables -P OUTPUT ACCEPT #answer the questions for iptables persistent echo iptables-persistent iptables-persistent/autosave_v4 boolean true | debconf-set-selections echo iptables-persistent iptables-persistent/autosave_v6 boolean true | debconf-set-selections -apt-get install -y --force-yes iptables-persistent \ No newline at end of file +apt-get install -y --force-yes iptables-persistent