Don’t use iptables to apply your rules one at a time, use iptables-restore to apply a whole ruleset in one action.
Set your INPUT and FORWARD policy to DROP.
Don’t set your OUTPUT policy to DROP unless you really know what you’re doing.
If you’re going to implement a blacklist or whitelist, you should look at using ipsets if that list is going to be more than two or three addresses, and if it might be dynamic.
Allow all traffic on lo.
You should ALLOW traffic in ctstates of RELATED and ESTABLISHED near the beginning of your rules
Don’t use iptables -L
DON’T USE IPTABLES -L
Use iptables-save instead of iptables -L.
Don’t use ifconfig or any of the net-tools.
Use iproute2 (ip address, ip link, ip route, ip rule, …)
Always read the man pages that are installed on the system you’re trying to use the corresponding software on.
Privacy & Cookies Policy
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.