Blocking Incoming Traffic

[znx]

slight refinement..

 

Code:

# iptables -F INPUT
# iptables -A input -i lo -s 127.0.0.1/8 -d 127.0.0.1/8 -j ACCEPT
# iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
# iptables -A INPUT -j DROP

 

ensures that loopback is actually looping.. addition of RELATED state (for instance passive ftp, dcc connections) and DROP rather than REJECT. Drop throws them away, Reject responds.. always better to be non-existant instead of visible..