Scheduled Maintenance: We are aware of an issue with Google, AOL, and Yahoo services as email providers which are blocking new registrations. We are trying to fix the issue and we have several internal and external support tickets in process to resolve the issue. Please see: viewtopic.php?t=158230

 

 

 

iptables output block not local

Linux Kernel, Network, and Services configuration.
Post Reply
Message
Author
pinhas_8947
Posts: 10
Joined: 2015-08-19 12:26

iptables output block not local

#1 Post by pinhas_8947 »

Hi

I try to create some rules to detect an outgoing traffic from my debian jessie that is not from my IP or loop. Can you please take a review this little script let me know what you think (okay, has bugs ...).
Thanks,

#!/bin/bash

/sbin/iptables -N C_OUT_N_LOCAL
/sbin/iptables -N C_OUT_N_LOCAL_LO

/sbin/iptables -A C_OUT_N_LOCAL -m limit --limit 2/min -j LOG --log-prefix "PK: output not local : " --log-level 4

LO_IP="127.0.0.1"
MY_IP="192.168.0.4"

/sbin/iptables -I OUTPUT -p ALL ! -s $LO_IP -j C_OUT_N_LOCAL_LO
/sbin/iptables -A C_OUT_N_LOCAL_LO -p ALL ! -s $MY_IP -j C_OUT_N_LOCAL

Post Reply