Minifirewall

Minifirewall is shellscripts for easy firewalling on a standalone server we used netfilter/iptables http://netfilter.org/ designed for recent Linux kernel See https://gitea.evolix.org/evolix/minifirewall

Install

install -m 0700 minifirewall /etc/init.d/minifirewall
install -m 0600 minifirewall.conf /etc/default/minifirewall

Edit /etc/default/minifirewall file:

If your interface is not eth0, change INT variable
If you don't IPv6 : IPv6=off
Modify INTLAN variable, probably with your IP/32 or your local network if you trust it
Set your trusted and privilegied IP addresses in TRUSTEDIPS and PRIVILEGIEDIPS variables
Authorize your +public+ services with SERVICESTCP1 and SERVICESUDP1 variables
Authorize your +semi-public+ services (only for TRUSTEDIPS and PRIVILEGIEDIPS ) with SERVICESTCP2 and SERVICESUDP2 variables
Authorize your +private+ services (only for TRUSTEDIPS ) with SERVICESTCP3 and SERVICESUDP3 variables
Configure your authorizations for external services : DNS, HTTP, HTTPS, SMTP, SSH, NTP
Add your specific rules

/etc/init.d/minifirewall start/stop/restart

If you want to add minifirewall in boot sequence:

systemctl enable minifirewall

This is an Evolix project and is licensed under the GPLv3, see the LICENSE file for details.