How can I block all traffic except web traffic?

Posted by toddoon on Server Fault See other posts from Server Fault or by toddoon
Published on 2009-03-18T15:23:02Z Indexed on 2010/03/14 0:55 UTC
Read the original article Hit count: 260

Filed under:

iptables

|

web-traffic

I have wrote my rules like this:

iptables -P INPUT DROP
iptables -P OUTPUT DROP
iptables -P FORWARD DROP

iptables -A OUTPUT -i eth0 -p tcp --dport 80 -j ACCEPT

What do I do next?

© Server Fault or respective owner

Related posts about iptables

Sometimes this script fails to update the iptables

as seen on Server Fault - Search for 'Server Fault'
It does not happen often, but sometimes after running the below script, checking the iptables with service iptables status shows that they weren't updated and the script doesn't output any error. The iptables is structured as look-up tree (long repeated sections snipped): #!/bin/sh iptables -t… >>> More
My current iptable configuration doesn't work [on hold]

as seen on Server Fault - Search for 'Server Fault'
sudo chkconfig iptables off /etc/init.d/iptables on ### Clear/flush iptables sudo iptables -F sudo iptables -P INPUT ACCEPT sudo iptables -P OUTPUT ACCEPT sudo iptables -P FORWARD ACCEPT ### Allow SSH iptables -A INPUT -i eth0 -p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT iptables… >>> More
L2TP iptables port forward

as seen on Server Fault - Search for 'Server Fault'
Hi all, I'm setting up port forwarding for an L2TP VPN connection to the local Windows 2003 VPN server. The router is a simpel Debian machine with iptables. The VPN server works perfect. But I cannot log in from the WAN. I'm missing something. The VPN server is using a pre-shared key (L2TP) and… >>> More
iptables -P FORWARD DROP makes port forwarding slow

as seen on Server Fault - Search for 'Server Fault'
I have three computers, linked like this: box1 (ubuntu) box2 router & gateway (debian) box3 (opensuse) [10.0.1.1] ---- [10.0.1.18,10.0.2.18,10.0.3.18] ---- [10.0.3.15] | box4, www [10.0.2.1] Among other… >>> More
IPtables AWS EC2 NAT/Reverse NAT - For Reverse Proxy style setup but with IPtables

as seen on Server Fault - Search for 'Server Fault'
I was thinking initially needing to do a reverse proxy or something so I could get some SSL/TLS traffic look like it is being terminated at a server and IP address in the AWS cloud, and then that traffic is forwarded onto our actual web servers that aren't in the cloud... I've not done much iptables… >>> More

Related posts about web-traffic

Web Traffic - How Content Optimization Builds Web Traffic

as seen on Ezine Articles - Search for 'Ezine Articles'
When all is said and done, the one sure way of building on a website's traffic is creating, maintaining and updating your content. In most cases, content refers to features, information and images. So how do you optimize your websites content? Here is how. >>> More
Getting a Search Engine Optimization Quote to Boost Your Web Traffic

as seen on Ezine Articles - Search for 'Ezine Articles'
One way link building is undoubtedly one of the most effective ways to improve the popularity and traffic of your website so getting a search engine optimization quote just makes sense if you want to do it the right way. It's a good option to consider building one way links manually but, if you're… >>> More
Web Traffic - Campaign on the Overdrive

as seen on Ezine Articles - Search for 'Ezine Articles'
The most crucial web traffic marketing strategy available to webmasters today is Search Engine Optimization (SEO). SEO is the one online marketing strategy no webmaster can ignore or succeed without. >>> More
Web Traffic Ranking for a Sub-domain vs domain

as seen on Server Fault - Search for 'Server Fault'
Hi, do u know of any solution to find the web traffic ranking of a subdomain independent from the domain >>> More
Web traffic/activity monitor

as seen on Super User - Search for 'Super User'
Is there a good free monitor that will allow me to monitor my son's internet activity. I'm specifically looking for history of websites visited and time spent on the site. I think that he is visiting sites that his mom would not approve of but is erasing the history etc. >>> More