summaryrefslogtreecommitdiff
path: root/policies
diff options
context:
space:
mode:
Diffstat (limited to 'policies')
-rw-r--r--policies/blocked-ips15
-rw-r--r--policies/iptables-default17
-rw-r--r--policies/iptables-web19
-rw-r--r--policies/iptables-webrestricted18
-rw-r--r--policies/profile1
5 files changed, 70 insertions, 0 deletions
diff --git a/policies/blocked-ips b/policies/blocked-ips
new file mode 100644
index 0000000..ceed910
--- /dev/null
+++ b/policies/blocked-ips
@@ -0,0 +1,15 @@
1115.47.3.229
2116.11.253.154
3118.129.166.149
4122.225.226.67
5125.46.15.194
6202.99.42.188
7218.145.128.230
8220.189.246.26
9222.68.199.238
1059.125.229.74
1160.217.229.222
1261.129.60.23
1370.85.215.42
1487.121.75.179
1588.220.70.24
diff --git a/policies/iptables-default b/policies/iptables-default
new file mode 100644
index 0000000..8f2377f
--- /dev/null
+++ b/policies/iptables-default
@@ -0,0 +1,17 @@
1#
2# iptables Firewall Policy
3# by Mike Crute (mcrute@gmail.com)
4# on September 19, 2009
5#
6
7ALLOW_PING=1
8
9TCP_ALLOW="22" # SSH
10
11#TCP_ALLOW=""
12#HOSTS_ALLOW=""
13#HOSTS_DENY=""
14#TCP_DENY=""
15#UDP_ALLOW="53"
16#UDP_DENY=""
17#RULES=""
diff --git a/policies/iptables-web b/policies/iptables-web
new file mode 100644
index 0000000..9dc9ca5
--- /dev/null
+++ b/policies/iptables-web
@@ -0,0 +1,19 @@
1#
2# iptables Firewall Policy
3# by Mike Crute (mcrute@gmail.com)
4# on September 19, 2009
5#
6
7ALLOW_PING=1
8
9TCP_ALLOW="22" # SSH
10TCP_ALLOW="${TCP_ALLOW} 80 443" # Web Ports
11TCP_ALLOW="${TCP_ALLOW} 20 21" # FTP Ports
12TCP_ALLOW="${TCP_ALLOW} 5870 5871" # Inbound tunnels
13HOSTS_DENY=$(cat /etc/firewall/blocked-ips)
14
15#HOSTS_ALLOW=""
16#TCP_DENY=""
17#UDP_ALLOW="53"
18#UDP_DENY=""
19#RULES=""
diff --git a/policies/iptables-webrestricted b/policies/iptables-webrestricted
new file mode 100644
index 0000000..149cb82
--- /dev/null
+++ b/policies/iptables-webrestricted
@@ -0,0 +1,18 @@
1#
2# iptables Firewall Policy
3# by Mike Crute (mcrute@gmail.com)
4# on September 19, 2009
5#
6
7ALLOW_PING=1
8
9TCP_ALLOW="22" # SSH
10TCP_ALLOW="${TCP_ALLOW} 80" # Web Ports
11TCP_ALLOW="${TCP_ALLOW} 20 21" # FTP Ports
12
13#HOSTS_ALLOW=""
14#HOSTS_DENY=""
15#TCP_DENY=""
16#UDP_ALLOW="53"
17#UDP_DENY=""
18#RULES=""
diff --git a/policies/profile b/policies/profile
new file mode 100644
index 0000000..c077218
--- /dev/null
+++ b/policies/profile
@@ -0,0 +1 @@
web
© 2015 Mike Crute