# Set IPTABLES rules, allow only private addresses iptables -A INPUT -s 10.0.0.0/8 -j ACCEPT iptables -A INPUT -s 44.0.0.0/8 -j ACCEPT iptables -A INPUT -s 192.168.0.0/16 -j ACCEPT iptables -A INPUT -s 169.254.0.0/16 -j ACCEPT ## Rule exceptions # Allow remote ssh only on eth0 iptables -A INPUT -i eth0 -p tcp --dport 22 -j ACCEPT # Allow jabber server connections iptables -A INPUT -i eth0 -p tcp --dport 9625 -j ACCEPT # Allow openfire admin port iptables -A INPUT -p tcp --dport 9090 -j ACCEPT # Drop all other addresses iptables -A INPUT -s 0/0 -j DROP # Set iptables eth1 rules iptables -A INPUT -i eth1 -p tcp --dport 22 -j DROP iptables -A INPUT -i eth1 -p tcp --dport 5223 -j DROP iptables -A INPUT -i eth1 -p tcp --dport 443 -j DROP iptables -A INPUT -i eth1 -p tcp --dport 9091 -j DROP # Protect the SQL database iptables -A INPUT -p tcp --dport 3306 -j DROP