Post a common configuration of iptables
# Generated by iptables-save v1.4.7 on Thu Apr 16 01:33:03 2015*filter:INPUT DROP [0:0]: FORWARD ACCEPT [0:0]: OUTPUT ACCEPT [0:0] # allow native loopback address-An INPUT-I lo-p all-j ACCEPT## allow these IP to do anything # vstar IP-An INPUT-s 110.122.120.54 impulse 32-j ACCEPT-An INPUT-s 110.122.120.9832-j ACCEPT#coco IP -An INPUT-s 220.72.141.97 DNS 27-j ACCEPT-An INPUT-s 220.72.141.98 DNS 27-j ACCEPT-An INPUT-s 210.141.170.130 DNS 27-j ACCEPT-An INPUT-s 210.141.170.131 DNS 27-j ACCEPT-An INPUT-s 110.206.89.226 ACCEPT## 27-j ACCEPT-An INPUT-s 110.206.89.227 DNS resolution-An INPUT-p udp-sport 53- J ACCEPT# allows 5672 of MQ to enter-An INPUT-s 10.10.2.160-p tcp-- sport 5672-j ACCEPT## forbids entry and exit of 27017 on eth0-An INPUT-I eth0-p tcp-- dport 27017-j DROP-An OUTPUT-o eth0-p tcp-sport 27017-j DROP## allows port 10050 of zabbix-An INPUT-s 100.10.2.160-p tcp-- dport 10050-j ACCEPT## permits port 10050 of snmp-An INPUT -s 100.10.2.160-p tcp-- dport 10050-j ACCEPT## allows the program host to access port 4506 of the specified IP-An INPUT-s 172.27.1.75-p tcp-- dport 4506-j ACCEPT## allows the following ports to enter-An INPUT-p tcp-- dport 8080-j ACCEPT-An INPUT-p tcp-- dport 8090-j ACCEPT-An INPUT-p tcp-- dport 13000-j ACCEPT-An INPUT-p tcp-- dport 9000-j ACCEPT-An INPUT-p tcp-dport 8888-j ACCEPTCOMMIT
