Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Scribd Logo
Upload

Welcome to Scribd!

  • 21 views

    Add Chain Input Src-Address 11.11.11.0/24 Comment "From Local Net1"

    Uploaded by

    Devroy Malakar
    The document contains firewall configuration rules that: 1) Allow established and related connections on the input and forward chains. 2) Log and drop invalid connections on the input and forward chains. 3) Check for well-known viruses on the input and forward chains. 4) Allow specific protocols and block ports associated with known viruses and malware on the virus chain.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd

    Add Chain Input Src-Address 11.11.11.0/24 Comment "From Local Net1"

    Uploaded by

    Devroy Malakar
    21 views2 pages
    The document contains firewall configuration rules that: 1) Allow established and related connections on the input and forward chains. 2) Log and drop invalid connections on the input and forward chains. 3) Check for well-known viruses on the input and forward chains. 4) Allow specific protocols and block ports associated with known viruses and malware on the virus chain.

    Original Description:

    firewall

    Original Title

    Firewall

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    DOC, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    The document contains firewall configuration rules that: 1) Allow established and related connections on the input and forward chains. 2) Log and drop invalid connections on the input and forward chains. 3) Check for well-known viruses on the input and forward chains. 4) Allow specific protocols and block ports associated with known viruses and malware on the virus chain.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd
    Download as doc, pdf, or txt
    21 views2 pages

    Add Chain Input Src-Address 11.11.11.0/24 Comment "From Local Net1"

    Uploaded by

    Devroy Malakar
    The document contains firewall configuration rules that: 1) Allow established and related connections on the input and forward chains. 2) Log and drop invalid connections on the input and forward chains. 3) Check for well-known viruses on the input and forward chains. 4) Allow specific protocols and block ports associated with known viruses and malware on the virus chain.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd
    Download as doc, pdf, or txt
    of 2

    / ip firewall filter add chain=input connection-state=established comment="Established connections" add chain=input connection-state=related comment="Related connections" add chain=input connection-state=invalid

    action=log log-prefix="INV !I"" comment="!og invalid connections" add chain=input connection-state=invalid action=drop comment=""rop invalid connections" add chain=input action=#ump #ump-target=virus comment="$$$ %hec& for well-&nown viruses $$$" add chain=input protocol=udp comment="'"(" add chain=input protocol=icmp comment="I%)(" add chain=input protocol=tcp dst-port=*+,- comment=" llow ((.(" add chain=input protocol=gre comment=" llow ((.(" add chain=input protocol=/0 comment=" llow 12(3" add chain=input src-address=*405*6/5*6+5*0,/,/ comment="3rom )i&roti&ls" add chain=input src-address=*405*6/5*+,5*0,/,/ comment="3rom )i&roti&ls" add chain=input src-address=11.11.11.0/24 comment="From local net1" add chain=input action=log comment="!og ever7thing else" log-prefix=""R1(" add chain=input action=drop comment=""rop ever7thing else" add chain=forward connection-state=established comment="Established connections" add chain=forward connection-state=related comment="Related connections" add chain=forward connection-state=invalid action=log log-prefix="INV !I"" comment="!og invalid connections" add chain=forward connection-state=invalid action=drop comment=""rop invalid connections" add chain=forward action=#ump #ump-target=virus comment="$$$ %hec& for well-&nown viruses $$$" add chain=forward protocol=udp comment="'"(" add chain=forward protocol=icmp comment="I%)(" add chain=forward src-address=*405*6/5*6+5*0,/,/ comment="3rom )i&roti&ls" add chain=forward src-address=*405*6/5*+,5*0,/,/ comment="3rom )i&roti&ls" add chain=forward src-address=11.11.11.0/24 comment="From local net1" add chain=forward action=log comment="!og ever7thing else" log-prefix="R1( add chain=forward action=drop comment=""rop ever7thing else" add chain=virus protocol=tcp dst-port=*-4-*-0 action=drop comment=""rop 8laster 9orm" add chain=virus protocol=udp dst-port=*-4-*-0 action=drop comment=""rop )essenger 9orm" add chain=virus protocol=tcp dst-port=664 action=drop comment=""rop 8laster 9orm" add chain=virus protocol=udp dst-port=664 action=drop comment=""rop 8laster 9orm" add chain=virus protocol=tcp dst-port=40- action=drop comment="::::::::" add chain=virus protocol=tcp dst-port=*;,6-*;-; action=drop comment="::::::::" add chain=virus protocol=tcp dst-port=*;/; action=drop comment=""rop )7"oom" add chain=virus protocol=tcp dst-port=*,*6 action=drop comment="::::::::" add chain=virus protocol=tcp dst-port=*-<- action=drop comment="ndm re=uester" add chain=virus protocol=tcp dst-port=*-<6 action=drop comment="ndm server"

    add chain=virus protocol=tcp dst-port=*-</ action=drop comment="screen cast" add chain=virus protocol=tcp dst-port=*-+- action=drop comment="hromgrafx" add chain=virus protocol=tcp dst-port=*-++ action=drop comment="cichlid" add chain=virus protocol=tcp dst-port=*6---*6-6 action=drop comment="9orm" add chain=virus protocol=tcp dst-port=,+64 action=drop comment="8agle Virus" add chain=virus protocol=tcp dst-port=,,/- action=drop comment=""rop "umaru5>" add chain=virus protocol=tcp dst-port=,4-4 action=drop comment=""rop 8eagle" add chain=virus protocol=tcp dst-port=,+64 action=drop comment=""rop 8eagle5%-?" add chain=virus protocol=tcp dst-port=-*,+--*,/ action=drop comment=""rop )7"oom" add chain=virus protocol=tcp dst-port=-6*; action=drop comment=""rop 8ac&door 1ptix(ro" add chain=virus protocol=tcp dst-port=6666 action=drop comment="9orm" add chain=virus protocol=udp dst-port=6666 action=drop comment="9orm" add chain=virus protocol=tcp dst-port=4446 action=drop comment=""rop 2asser" add chain=virus protocol=tcp dst-port=//<< action=drop comment=""rop 8eagle58" add chain=virus protocol=tcp dst-port=0/0/ action=drop comment=""rop "abber5 -8" add chain=virus protocol=tcp dst-port=*;;;; action=drop comment=""rop "umaru5>" add chain=virus protocol=tcp dst-port=*;;/; action=drop comment=""rop )7"oom58" add chain=virus protocol=tcp dst-port=*,-64 action=drop comment=""rop Net8us" add chain=virus protocol=tcp dst-port=*+-;; action=drop comment=""rop ?uang," add chain=virus protocol=tcp dst-port=,+-+6 action=drop comment=""rop 2ub2even" add chain=virus protocol=tcp dst-port=<44;< action=drop comment=""rop (hat8ot@ gobot@ Aaobot"

    You might also like