...
| Code Block | ||||||||
|---|---|---|---|---|---|---|---|---|
| ||||||||
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [14039465:18394491353]
# Keep Current connections alive
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
# Allow the UCSB Campus to ping the machine
-A INPUT -s 128.111.0.0/16 -p icmp -j ACCEPT
# Allow SSH Connections to the machine
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
# Allow the computer to talk to itself for its applications
-A INPUT -i lo -j ACCEPT
# Otherwise, drop the connection
-A INPUT -j REJECT --reject-with icmp-host-prohibited
COMMIT |
...