#!/bin/sh
iptables -F
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT DROP
iptables -A INPUT -i lo -j ACCEPT
iptables -A OUTPUT -o lo -j ACCEPT
..................
iptables -A INPUT -p all -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -p all -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
iptables -P INPUT DROP
iptables -P OUTPUT DROP
Пользователь решил продолжить мысль 04 Июля 2011, 14:24:09:
iptables -N https_check
iptables -N noway
iptables -A INPUT -p tcp --dport 443 -m conntrack --ctstate NEW -j https_check
iptables -A https_check -m conntrack --ctstate NEW -m recent --set --name HTTPS --rsource
iptables -A https_check -m conntrack --ctstate NEW -m recent --update --seconds 60 --hitcount 5 --name HTTPS --rsource -j noway
iptables -A noway -p tcp -j REJECT --reject-with tcp-reset
iptables -A noway -j REJECT
меж ними эти цепочки