photo network
i was wondering if someone can help me with iptables for the router photo attached
On Router:
1.i need to ssh from blue to red:
my answer:
iptables -A INPUT -s 10.2.0.0 -p tcp --dport 22 -j accept
iptables -A output -s 10.2.0.0 -p tcp --sport 22 -j accept
2.i need to http from blue to red (required for patching)?
3. i need to Allow pings both ways
my answer"
iptables -A input -p icmp --icmp-type 8 -m state --stae new,established -j accept
iptables -A input -p icmp --icmp-type 0 -m state --stae new,established -j accept
iptables -A output -p icmp --icmp-type 8 -m state --stae new,established -j accept
iptables -A output -p icmp --icmp-type 0 -m state --stae new,established -j accept
4.then Allow nothing else
my answer:
iptables -A INPUT -j DROP
5.ssh must only listen on blue network interface (in: /etc/ssh/sshd_config)?