diff --git a/.gitattributesdb b/.gitattributesdb index 5be28d6..7aab122 100644 --- a/.gitattributesdb +++ b/.gitattributesdb @@ -18,6 +18,8 @@ ZXRjL2Nyb250YWJzL3Jvb3Q= 1757593504 1757593504 root:root 0600 - - ZXRjL2dyb3Vw 1757761113 1757594224 root:root 0644 - - ZXRjL2hvc3RuYW1l 1757594311 1757594311 root:root 0644 - - ZXRjL2hvc3Rz 1757594362 1757594362 root:root 0644 - - +ZXRjL2lwdGFibGVzL3J1bGVzLXNhdmU= 1757766263 1757766263 root:root 0600 - - +ZXRjL2lwdGFibGVzL3J1bGVzNi1zYXZl 1757766078 1757766078 root:root 0600 - - ZXRjL2xvY2FsLmQvLmdpdGlnbm9yZQ== 1757595481 1757595481 root:root 0644 - - ZXRjL2xvY2FsLmQvdGVycmFmb3JtLWh0dHAtYmFja2VuZC5zdGFydA== 1757595926 1757595926 root:root 0755 - - ZXRjL25ldHdvcmsvLmdpdGlnbm9yZQ== 1757596572 1757596572 root:root 0644 - - diff --git a/etc/iptables/rules-save b/etc/iptables/rules-save new file mode 100644 index 0000000..8f0cf88 --- /dev/null +++ b/etc/iptables/rules-save @@ -0,0 +1,26 @@ +# Generated by iptables-save v1.8.11 (nf_tables) on Sat Sep 13 12:24:23 2025 +*filter +:INPUT DROP [20:916] +:FORWARD DROP [0:0] +:OUTPUT ACCEPT [194:15741] +[0:0] -A INPUT -s 10.254.0.0/24 -i eth1 -j ACCEPT +[78:7646] -A INPUT -i lo -j ACCEPT +[0:0] -A INPUT -s 127.0.0.0/8 -i eth0 -j DROP +[0:0] -A INPUT -s 10.0.0.0/8 -i eth0 -j DROP +[0:0] -A INPUT -s 172.16.0.0/12 -i eth0 -j DROP +[0:0] -A INPUT -s 192.168.0.0/16 -i eth0 -j DROP +[0:0] -A INPUT -s 10.254.0.0/24 -i eth1 -j ACCEPT +[0:0] -A INPUT -s 5.101.171.208/28 -j ACCEPT +[38:4676] -A INPUT -s 185.176.90.169/32 -j ACCEPT +[0:0] -A INPUT -s 172.236.16.105/32 -j ACCEPT +[0:0] -A INPUT -s 82.33.87.103/32 -j ACCEPT +[0:0] -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +[1:48] -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT +[0:0] -A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT +[0:0] -A INPUT -p icmp -m icmp --icmp-type 3 -j ACCEPT +[0:0] -A INPUT -p icmp -m icmp --icmp-type 11 -j ACCEPT +[0:0] -A INPUT -p icmp -m icmp --icmp-type 12 -j ACCEPT +[1:60] -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m multiport --dports 22,25422 -m conntrack --ctstate NEW -j ACCEPT +[0:0] -A INPUT -p tcp -m tcp --dport 25443 --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j ACCEPT +COMMIT +# Completed on Sat Sep 13 12:24:23 2025 diff --git a/etc/iptables/rules6-save b/etc/iptables/rules6-save new file mode 100644 index 0000000..c952765 --- /dev/null +++ b/etc/iptables/rules6-save @@ -0,0 +1,25 @@ +# Generated by ip6tables-save v1.8.11 (nf_tables) on Sat Sep 13 12:21:18 2025 +*filter +:INPUT DROP [0:0] +:FORWARD DROP [0:0] +:OUTPUT ACCEPT [0:0] +[0:0] -A INPUT -m conntrack --ctstate INVALID -j DROP +[0:0] -A INPUT -i lo -j ACCEPT +[0:0] -A INPUT -s ::1/128 -i eth0 -j DROP +[0:0] -A INPUT -s 2a01:a500:2981:1::/64 -j ACCEPT +[0:0] -A INPUT -s 2a07:4580:b0d:57f::169/128 -j ACCEPT +[0:0] -A INPUT -s 2600:3c13::2000:50ff:fef4:7f56/128 -j ACCEPT +[0:0] -A INPUT -s 2001:470:1f1d:58::/64 -j ACCEPT +[0:0] -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 128 -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 129 -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 4 -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT +[0:0] -A INPUT -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT +[0:0] -A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m multiport --dports 22,25422 -m conntrack --ctstate NEW -j ACCEPT +[0:0] -A INPUT -p tcp -m tcp --dport 25443 --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j ACCEPT +COMMIT +# Completed on Sat Sep 13 12:21:18 2025