summaryrefslogtreecommitdiff
path: root/testing/hosts/default/etc/iptables.drop
diff options
context:
space:
mode:
Diffstat (limited to 'testing/hosts/default/etc/iptables.drop')
-rw-r--r--testing/hosts/default/etc/iptables.drop12
1 files changed, 12 insertions, 0 deletions
diff --git a/testing/hosts/default/etc/iptables.drop b/testing/hosts/default/etc/iptables.drop
new file mode 100644
index 000000000..445c45669
--- /dev/null
+++ b/testing/hosts/default/etc/iptables.drop
@@ -0,0 +1,12 @@
+*filter
+
+# default policy is DROP
+-P INPUT DROP
+-P OUTPUT DROP
+-P FORWARD DROP
+
+# allow ssh
+-A INPUT -p tcp --dport 22 -j ACCEPT
+-A OUTPUT -p tcp --sport 22 -j ACCEPT
+
+COMMIT