|
|
@@ -138,20 +138,30 @@
|
|
|
# Traceroute
|
|
|
-A OUTPUT -p udp -m udp --sport 32768:65535 --dport 6881:33534 -j ACCEPT -m comment --comment "Traceroute"
|
|
|
|
|
|
+# KDE Connect
|
|
|
+-A INPUT -p tcp -m tcp --sport 1716 --dport 59442 -j ACCEPT -m comment --comment "KDE Conect"
|
|
|
+-A INPUT -d 255.255.255.255 -p udp -m udp --sport 32768:65535 --dport 1716 -j ACCEPT -m comment --comment "KDE Connect"
|
|
|
+-A INPUT -d 224.0.0.1 -j ACCEPT -m comment --comment "Multicast: All hosts, used by KDE Connect"
|
|
|
+-A OUTPUT -p tcp -m tcp --sport 49152:65535 --dport 1716 -j ACCEPT -m comment --comment "KDE Connect"
|
|
|
+#-A INPUT -p udp -m udp --sport 57621 --dport 57621 -j ACCEPT
|
|
|
+#-A INPUT -d 224.0.0.251 -p udp -m udp --sport 5353 --dport 5353 -j ACCEPT -m comment --comment "KDE Connect"
|
|
|
+#-A OUTPUT -p udp -m udp --sport 1716 --dport 1716
|
|
|
+
|
|
|
# Attacks, crawls, scans, etc to clutter chain
|
|
|
-A INPUT -p icmp -j clutter
|
|
|
-A INPUT -s 0.0.0.0 -d 255.255.255.255 -j clutter -m comment --comment "Broadcast messages"
|
|
|
--A OUTPUT -d 224.0.0.251 -p udp -m udp --sport 5353 --dport 5353 -j clutter -m comment --comment "Multicast: mDNS"
|
|
|
-A INPUT -d 224.0.0.1 -j clutter -m comment --comment "Multicast: All hosts"
|
|
|
-A INPUT -p udp -m udp --dport 19 -j clutter -m comment --comment "Character generator, looping to echo = DDoS"
|
|
|
-A INPUT -p tcp -m tcp --dport 23 -j clutter
|
|
|
-A INPUT -p udp -m udp --dport 53 -j clutter
|
|
|
-A INPUT -p udp -m udp --dport 111 -j clutter -m comment --comment "Probe/fingerprint Nix OS"
|
|
|
+-A INPUT -p udp -m udp --sport 137 --dport 137 -m comment --comment "NETBIOS Name Service"
|
|
|
-A INPUT -p tcp -m tcp --dport 445 -j clutter -m comment --comment "MS-DS active directory"
|
|
|
-A INPUT -p tcp -m tcp --dport 2323 -j clutter -m comment --comment "3d-nfsd"
|
|
|
-A INPUT -p udp -m udp --dport 5060 -j clutter
|
|
|
-A INPUT -p tcp -m tcp --dport 3389 -j clutter -m comment --comment "MS terminal server RDP"
|
|
|
-A INPUT -p udp -m udp --sport 57621 --dport 57621 -j clutter -m comment --comment "Spotify client P2P"
|
|
|
+-A OUTPUT -d 224.0.0.251 -p udp -m udp --sport 5353 --dport 5353 -j clutter -m comment --comment "Multicast: mDNS"
|
|
|
|
|
|
#-A INPUT -d 255.255.255.255 -p tcp -m tcp --sport 67 --dport 68 -j clutter -m comment --comment "DHCP"
|
|
|
#-A INPUT -m iprange --dst-range 185.66.250.254-185.66.250.255 -j clutter
|
tBKwtWS