milis/talimatname/genel/i/iptables/iptables.rc

85 lines
2.4 KiB
Plaintext
Raw Normal View History

2017-03-24 21:50:29 +01:00
#!/bin/sh
########################################################################
# Begin iptables
#
2017-10-27 20:46:27 +02:00
# Tanım: Start iptables
2017-03-24 21:50:29 +01:00
#
# Authors : Ken Moffat - ken@linuxfromscratch.org
# Bruce Dubbs - bdubbs@linuxfromscratch.org
#
# Version : LFS 7.0
#
########################################################################
### BEGIN INIT INFO
# Provides: iptables
# Required-Start:
# Should-Start:
# Required-Stop: $local_fs
# Should-Stop:
# Default-Start: 3 4 5
# Default-Stop:
2017-10-27 20:46:27 +02:00
# Short-Tanım: Loads iptables rules.
# Tanım: Iptables provides firewall for Linux systems.
2017-03-24 21:50:29 +01:00
# X-LFS-Provided-By: BLFS / LFS 7.0
### END INIT INFO
. /lib/lsb/init-functions
#$LastChangedBy: krejzi $
#$Date: 2013-06-11 11:01:46 -0500 (Tue, 11 Jun 2013) $
case "$1" in
start)
if [ -x /etc/rc.d/rc.iptables ]; then
log_info_msg "Starting iptables..."
/etc/rc.d/rc.iptables
evaluate_retval
fi
;;
lock)
log_info_msg "Locking system iptables firewall..."
/usr/sbin/iptables --policy INPUT DROP
/usr/sbin/iptables --policy OUTPUT DROP
/usr/sbin/iptables --policy FORWARD DROP
/usr/sbin/iptables --flush
/usr/sbin/iptables -t nat --flush
/usr/sbin/iptables -t mangle --flush
/usr/sbin/iptables --delete-chain
/usr/sbin/iptables -t nat --delete-chain
/usr/sbin/iptables -t mangle --delete-chain
/usr/sbin/iptables -A INPUT -i lo -j ACCEPT
/usr/sbin/iptables -A OUTPUT -o lo -j ACCEPT
evaluate_retval
;;
clear)
log_info_msg "Clearing system iptables iptables..."
/usr/sbin/iptables --policy INPUT ACCEPT
/usr/sbin/iptables --policy OUTPUT ACCEPT
/usr/sbin/iptables --policy FORWARD ACCEPT
/usr/sbin/iptables --flush
/usr/sbin/iptables -t nat --flush
/usr/sbin/iptables -t mangle --flush
/usr/sbin/iptables --delete-chain
/usr/sbin/iptables -t nat --delete-chain
/usr/sbin/iptables -t mangle --delete-chain
evaluate_retval
;;
status)
/usr/sbin/iptables --numeric --list
/usr/sbin/iptables -t nat --numeric --list
/usr/sbin/iptables -t mangle --numeric --list
;;
*)
echo "Usage: $0 {start|clear|lock|status}"
exit 1
;;
esac
# End /etc/init.d/iptables