Basic iptables for a webserver: SSL Tomcat, postgres, ssh and that's it.
- by Paperino
This is probably as basic as it gets but I'm a developer and really have no experience with iptbles.
The only connections I need opened are:
eth0 (outward facing)
ssh
ping
SSL to tomcat (forward port 443 to
8443)
eth1(local subnet)
connection to postgres server
Everything else should be blocked. My current attempts seem to be leaving all other ports open. I wonder what gives.
Thanks serverfault!