TEXT
51
portknocking.txt
Guest on 11th May 2022 01:49:51 AM
iptables -F
iptables -X
iptables -Z
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -N port
iptables -A port -m recent --name knock1 --remove
iptables -A port -m recent --set --name knock2
iptables -A INPUT -p tcp --dport 168 -m recent --set --name knock1
iptables -A INPUT -p tcp --dport 978 -m recent --rcheck --name knock1 -j port
iptables -A INPUT -p tcp --dport 22 -m recent --rcheck --seconds 10 --name knock2 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j DROP
/etc/init.d/networking restart