<div>Pessoal, bom dia.</div>
<div>Criei as seguintes regras no ip tables, mas gostaria de saber de vocês, se necessita de mais alguma coisa, ou se esta bom desta maneira.</div>
<div>Desde já agradeço a atenção.</div>
<div> </div>
<div># Generated by iptables-save v1.2.11 on Mon Nov 21 19:36:08 2005<br>*mangle<br>:PREROUTING ACCEPT [10841147:2094051733]<br>:INPUT ACCEPT [10321713:2051635382]<br>:FORWARD ACCEPT [0:0]<br>:OUTPUT ACCEPT [10120294:1997487730]
<br>:POSTROUTING ACCEPT [10117524:1996938029]<br>COMMIT<br># Completed on Mon Nov 21 19:36:08 2005<br># Generated by iptables-save v1.2.11 on Mon Nov 21 19:36:08 2005<br>*nat<br>:PREROUTING ACCEPT [315:33059]<br>:POSTROUTING ACCEPT [22:4848]
<br>:OUTPUT ACCEPT [0:0]<br>COMMIT<br># Completed on Mon Nov 21 19:36:08 2005<br># Generated by iptables-save v1.2.11 on Mon Nov 21 19:36:08 2005<br>*filter<br>:INPUT DROP [26:3695]<br>:FORWARD ACCEPT [0:0]<br>:OUTPUT ACCEPT [25925:5235989]
<br>-A INPUT -i lo -j ACCEPT<br>-A INPUT -i eth1 -j ACCEPT<br>-A INPUT -d 200.xxx.xxx.xxx -i eth0 -p tcp -m multiport --dports 22,443,5060,4569 -j ACCEPT<br>-A INPUT -d 200.xxx.xxx.xxx -i eth0 -p udp -m multiport --dports 5060,4569,123 -j ACCEPT
<br>-A INPUT -p icmp -m icmp --icmp-type 0 -j ACCEPT<br>-A INPUT -p icmp -m icmp --icmp-type 8 -m limit --limit 5/sec -j ACCEPT<br>-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT<br>COMMIT<br> </div>
<div>Onde o IP 200.xxx.xxx.xxx é o IP do Asterisk.</div>