We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 2fc6677 commit fa899f7Copy full SHA for fa899f7
1 file changed
modules/iptables/rules-v4.txt
@@ -23,9 +23,6 @@
23
# allow established and related connections
24
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
25
26
-# allow SSH (port 22)
27
--A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
28
-
29
# allow HTTP and HTTPS
30
-A INPUT -p tcp -m multiport --dports 80,443 -m conntrack --ctstate NEW -j ACCEPT
31
@@ -41,7 +38,7 @@
41
38
# logging denied packets
42
39
-A INPUT -m limit --limit 3/min --limit-burst 10 -j LOG --log-prefix "[IPTABLES BLOCK] "
43
40
44
-# rate limiting (prevent brute-force attacks)
+# rate limit SSH connections
45
-A INPUT -p tcp --dport 22 -m limit --limit 3/min --limit-burst 5 -j ACCEPT
46
-A INPUT -p tcp --dport 22 -j REJECT
47
0 commit comments