PROPOSTA DE IMPLEMENTAÇÃO DE SEGURANÇA PARAREDES LOCAIS COM ACESSO A INTERNET

delay-threshold 1000 -j RULE_17 $IPTABLES -A RULE_17 -j LOG --log-level 2 --log-prefix "PORT_SCAN_DETECTADO" --log-tcp-sequence --log-tcpoptions --log-ip-options $IPTABLES -A RULE_17 -j DROP # Rule 18(global) # $IPTABLES -N RULE_18 $IPTABLES -A OUTPUT -p ip -f -j RULE_18 $IPTABLES -A INPUT -p ip -f -j RULE_18 $IPTABLES -A FORWARD -p ip -f -j RULE_18 $IPTABLES -A RULE_18 -j LOG --log-level 4 --log-prefix "FRAGMENTO_IP" --log-tcp-sequence --log-tcp-options -log-ip-options $IPTABLES -A RULE_18 -j DROP # Rule 19(global) # $IPTABLES -N RULE_19 $IPTABLES -A INPUT -p tcp -s 200.222.17.0/24 --source-port 1024:65535 -d 200.167.129.34 --destination-port 22 -m state --state NEW -j RULE_19 $IPTABLES -A INPUT -p tcp -s 200.20.228.0/24 --source-port 1024:65535 -d 200.167.129.34 --destination-port 22 -m state --state NEW -j RULE_19 $IPTABLES -A INPUT -p tcp -s 200.167.209.0/24 --sourceport 1024:65535 -d 200.167.129.34 --destination-port 22 -m state --state NEW -j RULE_19 $IPTABLES -A INPUT -p tcp -s 200.167.129.32/28 --sourceport 1024:65535 -d 200.167.129.34 --destination-port 22 -m state --state NEW -j RULE_19 $IPTABLES -A INPUT -p tcp -s 200.167.129.16/28 --sourceport 1024:65535 -d 200.167.129.34 --destination-port 22 -m state --state NEW -j RULE_19 $IPTABLES -A RULE_19 -j LOG --log-level 6 --log-prefix "SSH-" --log-tcp-sequence --log-tcp-options --log-ipoptions $IPTABLES -A RULE_19 -j ACCEPT # Rule 20(global) # $IPTABLES -N RULE_20 $IPTABLES -A OUTPUT -p icmp -d 200.167.129.34 --icmp-type 0/0 -m state --state NEW -j RULE_20 $IPTABLES -A INPUT -p icmp -d 200.167.129.34 --icmp-type 0/0 -m state --state NEW -j RULE_20 134