iptables exclude ports

This commit is contained in:
t3chn0m4g3 2015-01-22 10:10:38 +01:00
parent 6732d6863c
commit e024bbe294

View file

@ -221,7 +221,7 @@ stop on runlevel [!2345]
respawn
pre-start script
sleep 1
/sbin/iptables -A INPUT -p tcp --syn -m state --state NEW -j NFQUEUE
/sbin/iptables -A INPUT -p tcp --syn -m state --state NEW --destination-port ! 21,22,42,80,135,443,445,1433,3306,5060,5061,64295,64296 -j NFQUEUE
end script
script
sleep 1
@ -229,7 +229,7 @@ script
end script
post-stop script
sleep 1
/sbin/iptables -D INPUT -p tcp --syn -m state --state NEW -j NFQUEUE
/sbin/iptables -D INPUT -p tcp --syn -m state --state NEW --destination-port ! 21,22,42,80,135,443,445,1433,3306,5060,5061,64295,64296 -j NFQUEUE
/usr/bin/docker rm honeytrap
end script
EOF