règles iptables pour limiter samba au réseau local 192.168.0.0/16

This commit is contained in:
random-toto@localhost 2016-05-30 14:32:42 +02:00
parent 5c00402d76
commit b71dc6cd56
1 changed files with 15 additions and 0 deletions

15
shell/forbid_samba.sh Normal file
View File

@ -0,0 +1,15 @@
#!/bin/bash
iptables -A INPUT -p tcp --destination-port 135 -m iprange --src-range 192.168.0.0-192.168.10.255 -j ACCEPT
iptables -A INPUT -p tcp --destination-port 139 -m iprange --src-range 192.168.0.0-192.168.10.255 -j ACCEPT
iptables -A INPUT -p tcp --destination-port 445 -m iprange --src-range 192.168.0.0-192.168.10.255 -j ACCEPT
iptables -A INPUT -p tcp --destination-port 137 -m iprange --src-range 192.168.0.0-192.168.10.255 -j ACCEPT
iptables -A INPUT -p tcp --destination-port 138 -m iprange --src-range 192.168.0.0-192.168.10.255 -j ACCEPT
iptables -A INPUT -p tcp --destination-port 135 -j REJECT
iptables -A INPUT -p tcp --destination-port 139 -j REJECT
iptables -A INPUT -p tcp --destination-port 445 -j REJECT
iptables -A INPUT -p tcp --destination-port 137 -j REJECT
iptables -A INPUT -p tcp --destination-port 138 -j REJECT