Simple and flexible firewall for Linux server
Vous ne pouvez pas sélectionner plus de 25 sujets Les noms de sujets doivent commencer par une lettre ou un nombre, peuvent contenir des tirets ('-') et peuvent comporter jusqu'à 35 caractères.
Gregory Colpart 5a907b1ce0 new policy for default ports: we close almost all to be sure that nothing works if we don't configure it il y a 1 mois
.gitignore Add a Vagrantfile for testing il y a 1 an
LICENSE Minifirewall is now under GPLv3 license il y a 1 an
README.md Fix typo in install doc il y a 1 an
Vagrantfile Add a Vagrantfile for testing il y a 1 an
blacklist-countries.sh Modify URL to track country ip blocks il y a 5 ans
cron_minifirewall Added an example of cron script to daily reload iptables il y a 9 ans
minifirewall Better handling of Docker to match the usual minifirewall behaviour il y a 2 mois
minifirewall.conf new policy for default ports: we close almost all to be sure that nothing works if we don't configure it il y a 1 mois
ripe.sh Add delegated CIDR for AFRINIC and LACNIC. il y a 6 ans

README.md

Minifirewall

Minifirewall is shellscripts for easy firewalling on a standalone server we used netfilter/iptables http://netfilter.org/ designed for recent Linux kernel See https://gitea.evolix.org/evolix/minifirewall

Install

install -m 0700 minifirewall /etc/init.d/minifirewall
install -m 0600 minifirewall.conf /etc/default/minifirewall

Config

Edit /etc/default/minifirewall file:

  • If your interface is not eth0, change INT variable
  • If you don’t IPv6 : IPv6=off
  • Modify INTLAN variable, probably with your IP/32 or your local network if you trust it
  • Set your trusted and privilegied IP addresses in TRUSTEDIPS and PRIVILEGIEDIPS variables
  • Authorize your +public+ services with SERVICESTCP1 and SERVICESUDP1 variables
  • Authorize your +semi-public+ services (only for TRUSTEDIPS and PRIVILEGIEDIPS ) with SERVICESTCP2 and SERVICESUDP2 variables
  • Authorize your +private+ services (only for TRUSTEDIPS ) with SERVICESTCP3 and SERVICESUDP3 variables
  • Configure your authorizations for external services : DNS, HTTP, HTTPS, SMTP, SSH, NTP
  • Add your specific rules

Usage

/etc/init.d/minifirewall start/stop/restart

If you want to add minifirewall in boot sequence:

systemctl enable minifirewall

License

This is an Evolix project and is licensed under the GPLv3, see the LICENSE file for details.