28 lines
667 B
YAML
28 lines
667 B
YAML
iptables_rules_v4:
|
|
filter:
|
|
INPUT:
|
|
policy: DROP
|
|
rules:
|
|
- "-i lo -j ACCEPT"
|
|
- "-m state --state RELATED,ESTABLISHED -j ACCEPT"
|
|
- "-p icmp -m icmp --icmp-type any -j ACCEPT"
|
|
- "-p tcp -m tcp --dport 22 -j ACCEPT"
|
|
FORWARD:
|
|
policy: ACCEPT
|
|
OUTPUT:
|
|
policy: ACCEPT
|
|
iptables_rules_v6:
|
|
filter:
|
|
INPUT:
|
|
policy: DROP
|
|
rules:
|
|
- "-i lo -j ACCEPT"
|
|
- "-m state --state RELATED,ESTABLISHED -j ACCEPT"
|
|
- "-p ipv6-icmp -j ACCEPT"
|
|
- "-p tcp -m tcp --dport 22 -j ACCEPT"
|
|
FORWARD:
|
|
policy: ACCEPT
|
|
OUTPUT:
|
|
policy: ACCEPT
|
|
iptables_reload_on_update: true
|