Changes between Version 5 and Version 6 of ServBelmez

Timestamp:

Apr 21, 2025, 10:49:00 AM (3 weeks ago)

Author:

i22balur

Comment:

--

ServBelmez

@@ -77 +77 @@
 
 '''iptables'''
+
+Las reglas que se han añadido han sido las siguientes:
+
+{{{#!bash
+iptables -A INPUT -p tcp --dport 2049 -j ACCEPT   # Puerto para NFS
+iptables -A INPUT -p udp --dport 2049 -j ACCEPT   # UDP para NFS
+iptables -A INPUT -p udp --dport 111 -j ACCEPT    # UDP para rpcbind
+iptables -A INPUT -p tcp --dport 20048 -j ACCEPT  # Mountd
+iptables -A INPUT -p udp --dport 20048 -j ACCEPT  # Mountd
+iptables -A INPUT -j REJECT --reject-with icmp-host-prohibited
+}}}
+
+Al final se tiene lo siguiente:
+
+{{{#!bash
+Chain INPUT (policy ACCEPT)
+target     prot opt source               destination         
+ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
+ACCEPT     icmp --  anywhere             anywhere            
+ACCEPT     all  --  anywhere             anywhere            
+ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
+ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:nrpe
+ACCEPT     udp  --  anywhere             anywhere             udp dpt:tftp
+ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:tftp
+ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:nfs
+ACCEPT     udp  --  anywhere             anywhere             udp dpt:nfs
+ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:sunrpc
+ACCEPT     udp  --  anywhere             anywhere             udp dpt:sunrpc
+ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:mountd
+ACCEPT     udp  --  anywhere             anywhere             udp dpt:mountd
+ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:npp
+REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited
+
+Chain FORWARD (policy ACCEPT)
+target     prot opt source               destination         
+REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited
+
+Chain OUTPUT (policy ACCEPT)
+target     prot opt source               destination         
+
+Chain DOCKER-USER (0 references)
+target     prot opt source               destination
+}}}