Páginas

Feedback

Pessoal, estive com pouco tempo de dar manutenção nesse blog nos últimos tempos quero ver se coloco mais dicas aqui mas para isso preciso saber se está ajudando vocês, coloquem comentários sobre os assuntos acessados e dicas que eu possa colocar aqui para agregar conteúdo aos assuntos ajude a fazer esse blog mais interessante.

Mini- Curriculo

Acesse www.ntd.com.br e veja o meu portfolio.



Mini-Curriculo: Técnico em Contabilidade, com Bacharelado em Informática, Pós Graduação em Gestão de Negócios e Pós Graduação em Gerência de Projetos, atuei como Administrador de Redes e Gerente de Informática da Comercial de Eletrodoméstico Pedro Obino Jr. SA. entre 1994 e 2004, fundei em 2004 em Santa Catarina a empresa Network Design atuando na área de serviços a órgãos como Receita Federal, INSS, Banco do Brasil, BESC, Caixa Econômica Federal, Escolas Municipais e Estaduais nos projetos Minicom (Ministérios das Telecomunicações) na instalação e manutenção de Telecentros, FNDE. Em 2010 assumi como Gerente de Infraestrutura de TI & Telecom da Pref. Mun. Navegantes - SC atendendo o passo municipal e todas as secretarias ligadas ao município. Em 2011 entrei para a equipe da GOVBR atendendo a implantação, suporte e treinamento no sistema de Contabilidade Pública fabricado pela Cetil SA em 2013 entrei para a equipe de projetos de implantação de software da Nexxera SA.







quarta-feira, 5 de maio de 2010

Um Script de Firewall com Iptables Funcional

#!/bin/sh
# Scrip de Firewall

DNSSERVER1=200.200.200.200
DNSSERVER2=200.200.200.200
IPINTERNO=192.168.0.254
IPEXTERNO=200.201.201.201
INTRANET=192.168.0.0/24
ANY=0/0


/sbin/iptables -F
/sbin/iptables -X

########################
echo Bloqueia Netmeeting
########################
/sbin/iptables -A FORWARD -p tcp --dport 389 -j DROP
/sbin/iptables -A FORWARD -p tcp --dport 522 -j DROP
/sbin/iptables -A FORWARD -p tcp --dport 1503 -j DROP
/sbin/iptables -A FORWARD -p tcp --dport 1720 -j DROP
/sbin/iptables -A FORWARD -p tcp --dport 1731 -j DROP

#######################
echo BLOQUEIA P2P
#######################
echo Bloqueando AIM:

/sbin/iptables -A FORWARD -d login.oscar.aol.com -j REJECT

echo echo Bloqueando ICQ:

/sbin/iptables -A FORWARD -p TCP --dport 5190 -j REJECT

/sbin/iptables -A FORWARD -d login.icq.com -j REJECT

echo Bloqueando MSN:

/sbin/iptables -A FORWARD -p TCP --dport 1863 -j REJECT

/sbin/iptables -A FORWARD -d 64.4.13.0/24 -j REJECT

echo Bloqueando Yahoo Messenger:

/sbin/iptables -A FORWARD -d cs.yahoo.com -j REJECT

/sbin/iptables -A FORWARD -d scsa.yahoo.com -j REJECT

echo Bittorrent:

/sbin/iptables -A FORWARD -p tcp -i eth0 --dport 6881:6889 -d 192.168.0.2 -j REJECT

echo iMesh:

/sbin/iptables -A FORWARD -d 216.35.208.0/24 -j REJECT

echo BearShare:

/sbin/iptables -A FORWARD -p TCP --dport 6346 -j REJECT

echo ToadNode:

/sbin/iptables -A FORWARD -p TCP --dport 6346 -j REJECT

echo WinMX:

/sbin/iptables -A FORWARD -d 209.61.186.0/24 -j REJECT

/sbin/iptables -A FORWARD -d 64.49.201.0/24 -j REJECT

echo Napigator:

/sbin/iptables -A FORWARD -d 209.25.178.0/24 -j REJECT

echo Morpheus:

/sbin/iptables -A FORWARD -d 206.142.53.0/24 -j REJECT

/sbin/iptables -A FORWARD -p TCP --dport 1214 -j REJECT

echo KaZaA:

/sbin/iptables -A FORWARD -d 213.248.112.0/24 -j REJECT

/sbin/iptables -A FORWARD -p TCP --dport 1214 -j REJECT

echo Limewire:

/sbin/iptables -A FORWARD -p TCP --dport 6346 -j REJECT

echo Audiogalaxy:

/sbin/iptables -A FORWARD -d 64.245.58.0/23 -j REJECT


##########################
echo Libera NAT C/ Proxy
##########################

/sbin/iptables -A FORWARD -s $INTRANET -p tcp --dport 80 -j DROP
/sbin/iptables -t nat -A POSTROUTING -s $INTRANET -o eth0 -j SNAT --to $IPEXTERNO
/sbin/iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128

###############################
echo Libera acesso Loopback
###############################
/sbin/iptables -A INPUT -i lo -j ACCEPT

########################################
echo Bloqueando Windows Live Messenger
########################################
/sbin/iptables -A FORWARD -s 192.167.123.0/24 -p tcp -j DROP
/sbin/iptables -A FORWARD -s 192.168.0.0/24 -p tcp --dport 1863 -j DROP
/sbin/iptables -A FORWARD -s 192.168.0.0/24 -p tcp --dport 5190 -j DROP

#############################
echo Tratando Pacotes de Ping
#############################

/sbin/iptables -A OUTPUT -p icmp --icmp-type echo-request -j ACCEPT
/sbin/iptables -A INPUT -p icmp --icmp-type echo-request -j ACCEPT
/sbin/iptables -A FORWARD -p icmp --icmp-type echo-request -j ACCEPT
/sbin/iptables -A FORWARD -p icmp --icmp-type echo-request -m limit --limit 1/s -j ACCEPT
/sbin/iptables -A FORWARD -p tcp -m limit --limit 1/s -j ACCEPT
/sbin/iptables -A FORWARD -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s -j ACCEPT

###############################
echo Tratando Pacotes Quebrados
###############################

/sbin/iptables -A FORWARD -m unclean -j DROP

##############################
echo Liberando SSH ao Firewall
##############################

/sbin/iptables -A INPUT -p tcp -s $INTRANET --dport 22 -j ACCEPT
/sbin/iptables -A INPUT -p tcp --dport 22 -j DROP
/sbin/iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

##########################################
echo Liberando Consulta ao Servidor de DNS
##########################################
/sbin/iptables -A FORWARD -p udp -s $INTRANET --sport 1023:65535 -d $DNSSERVER1 --dport 53 -j ACCEPT
/sbin/iptables -A FORWARD -p udp -s $INTRANET --sport 1023:65535 -d $DNSSERVER2 --dport 53 -j ACCEPT

################################
echo Liberando Acesso Http,Https
################################

/sbin/iptables -A FORWARD -p tcp -s $INTRANET --sport 1023:65535 -d $ANY --dport 80 -j ACCEPT
/sbin/iptables -A FORWARD -p tcp -s $INTRANET --sport 1023:65535 -d $ANY --dport 443 -j ACCEPT
###############################
echo libera e-mails
###############################
/sbin/iptables -A FORWARD -p tcp --dport 143 -j ACCEPT
/sbin/iptables -A FORWARD -p tcp --dport 110 -j ACCEPT
/sbin/iptables -A INPUT -p tcp --dport 143 -j ACCEPT
/sbin/iptables -A INPUT -p tcp --dport 110 -j ACCEPT
/sbin/iptables -A OUTPUT -p tcp --dport 143 -j ACCEPT
/sbin/iptables -A OUTPUT -p tcp --dport 110 -j ACCEPT
/sbin/iptables -A FORWARD -p tcp --dport 25 -j ACCEPT
/sbin/iptables -A INPUT -p tcp --dport 25 -j ACCEPT
/sbin/iptables -A OUTPUT -p tcp --dport 25 -j ACCEPT


#########################
echo Estalizando Firewall
#########################

/sbin/iptables -A FORWARD -m state --state ESTABLISHED,RELATED,NEW -j ACCEPT


echo xxxxxxxxxxxxxxxxxxxxxxxx F i r e w a l l U P xxxxxxxxxxxxxxxxxxxxxxxxxxx
Postado por às

Nenhum comentário:

Postar um comentário

Assinar: Postar comentários (Atom)