iptables problem

AmunRa · 02-12-2008

Hey guys-- I hope shmoocon went well. I have been hard at work here on a few projects of mine, and was wondering if anyone could give me some insight as to why this configuration file was not working correctly.

Code:

#! /bin/bash
# iptables configuration file for projectobvious.com

# Enable stateful filtering allowing connections initiated on host be allowed.
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
iptables -A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT

# Allow Incoming SSH on port 22
iptables -A INPUT -p tcp -m tcp --dport 22 -j ACCEPT

# Prevent brute-forcing of SSH connections.
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --set --name SSH
iptables -A INPUT -p tcp --dport 22 -m state --state NEW -m recent --update --seconds 60 --hitcount 8 --rttl --name SSH -j DROP

# Allow Everything from the local host
iptables -A INPUT -s 127.0.0.1 -j ACCEPT

# Block Outgoing SSH connections to prevent connection bouncing
iptables -A OUTPUT -p tcp -m tcp --dport 22 -j DROP

# Block Everything else
iptables -A INPUT -j DROP
iptables -A FORWARD -j DROP

Any insight would be appreciated.

streaker69 · 02-13-2008

Shmoocon is this weekend, I thought you were going to make it.

AmunRa · 02-13-2008

Hey Streaker--

I meant to say "goes well." I actually cannot make it, as the Navy has me doing a few other things this coming weekend.

I also figured out my iptables problem, but thanks anyway.

Quote:

# Block Outgoing SSH connections to prevent connection bouncing
iptables -A OUTPUT -p tcp -m tcp --dport 22 -j DROP

should have read

Quote:

# Block Outgoing SSH connections to prevent connection bouncing
iptables -A FORWARD -p tcp -m tcp --dport 22 -j DROP

streaker69 · 02-13-2008

I think you need to get your priorities straight. what's more important? Your career with the navy or coming out and having some beer with a bunch of nutcases you only know from the inturweb?

ccie4526 · 02-13-2008

Quote:

Originally Posted by streaker69

I think you need to get your priorities straight. what's more important? Your career with the navy or coming out and having some beer with a bunch of nutcases you only know from the inturweb?

Heh, he's not the only one. I obviously have my priorities incorrectly arranged as well.

Just found out that when I get finished in Denver, I'm going to Johnson City, TN. Bleh.

DaKahuna · 02-13-2008

Quote:

Originally Posted by streaker69

I think you need to get your priorities straight. what's more important? Your career with the navy or coming out and having some beer with a bunch of nutcases you only know from the inturweb?

Well you need to check the age of Naval Academy attendee's. He's not 21 so drinking is not something he can legally do, quite yet.

In any case, he's going to be doing a RED TEAM this weekend so he may end up having more fun than us.

brwrdrvr · 02-14-2008

Quote:

Originally Posted by DaKahuna

Well you need to check the age of Naval Academy attendee's. He's not 21 so drinking is not something he can legally do, quite yet.

In any case, he's going to be doing a RED TEAM this weekend so he may end up having more fun than us.

If RED TEAM in the Navy is anything like OP-FOR in the Army, I would have to say he will have more fun. I loved it when I got to be on an OP-FOR team pitted against the troops that had to do things by the rules. and we could reek havoc on everyone and everything.

AmunRa · 02-15-2008

Quote:

Originally Posted by DaKahuna

Well you need to check the age of Naval Academy attendee's. He's not 21 so drinking is not something he can legally do, quite yet.

In any case, he's going to be doing a RED TEAM this weekend so he may end up having more fun than us.

Never know. I've been doing some work with iptables in an effort to keep people off my machines, as well as getting my hands on a lot of source code for some exploits.

I'll definitely be at next year's though!

02-13-2008	#2 (permalink)
streaker69 Psychic Amish Stumbler Join Date: Jul 2004 Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA Posts: 11,592	Shmoocon is this weekend, I thought you were going to make it. __________________ "One of these days, I'm going to cut you to pieces." If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum. Thank you.

02-13-2008	#4 (permalink)
streaker69 Psychic Amish Stumbler Join Date: Jul 2004 Location: Virginville, BlueBall, Bird In Hand, Intercourse, Paradise, PA Posts: 11,592	I think you need to get your priorities straight. what's more important? Your career with the navy or coming out and having some beer with a bunch of nutcases you only know from the inturweb? __________________ "One of these days, I'm going to cut you to pieces." If you're offended by this post, please feel free to report it to one of the many helpful moderators of this forum. Thank you.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode