---
title: "Iptables kontroll"
type: "forum-thread"
url: "https://www.webforum.nu/amne/linux-bsd/175393-iptables-kontroll"
topic: "Linux & BSD"
topic_url: "https://www.webforum.nu/amne/linux-bsd"
author: "pellesvenne"
published: "2008-11-19T05:00:10.000Z"
updated: "2008-11-19T05:00:10.000Z"
replies: 0
views: 311
page: 1
pages: 1
language: "sv-SE"
site: "webForum — webforum.nu"
rights: "Upphovsrätten till varje inlägg tillhör dess författare."
attribution: "Citera som: webForum, https://www.webforum.nu/amne/linux-bsd/175393-iptables-kontroll"
---

# Iptables kontroll

## #1 — pellesvenne, 2008-11-19T05:00Z

Hej kan någon hitta nått fel med mina brandväggsregler?
Jag misstänker att apache kraschar pga reglerna..

**:INPUT ACCEPT \[5:1118\]
:FORWARD ACCEPT \[0:0\]
:OUTPUT ACCEPT \[1219048:1474100832\]
:RH-Firewall-1-INPUT - \[0:0\]
\-A INPUT -j RH-Firewall-1-INPUT
\-A FORWARD -j RH-Firewall-1-INPUT
\-A RH-Firewall-1-INPUT -i lo -j ACCEPT
\-A RH-Firewall-1-INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
\-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT
\-A RH-Firewall-1-INPUT -p tcp -m state --state NEW -m tcp --dport 21 -j ACCEPT

\-A RH-Firewall-1-INPUT -p tcp ! --syn -m state --state NEW -j DROP
\-A RH-Firewall-1-INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,PSH,URG -j DROP
\-A RH-Firewall-1-INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,PSH,ACK,URG -j DROP
\-A RH-Firewall-1-INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
\-A RH-Firewall-1-INPUT -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -j DROP
\-A RH-Firewall-1-INPUT -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
\-A RH-Firewall-1-INPUT -p tcp -m tcp --tcp-flags FIN,ACK FIN -j DROP
\-A RH-Firewall-1-INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN,SYN,RST,ACK,URG -j DROP

\-A RH-Firewall-1-INPUT -p icmp -m limit --limit 1/sec --limit-burst 1 -j ACCEPT
\-A RH-Firewall-1-INPUT -p icmp -j DROP
\-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT**

Permalänk: https://www.webforum.nu/p/175393

---

Tråden på webben: https://www.webforum.nu/amne/linux-bsd/175393-iptables-kontroll