[asterisk-users] iptables for Asterisk - Any good guides out there?

[Steve Edwards]

On Sun, 15 May 2011, Hans Witvliet wrote:

> It's a bit more complicated....
>
> after the last rules, it is handy to put:
> $iptables -A INPUT  -i $EXTERNAL_DEV -j LOG --log-prefix " EXT; INC "
> iptables -A OUTPUT  -o $EXTERNAL_DEV -j LOG --log-prefix " EXT; OUT "
> iptables -A FORWARD -i $EXTERNAL_DEV -j LOG --log-prefix " EXT; FWD "
> So can can see in the syslog what you are missing ;-)

Adding a couple of lines to root's crontab like:

#       Min     hour    DOM     month   DOW     command
#       ----------------------------------------------
#       */5     *       *       *       *       /etc/init.d/iptables stop

make it easy to enable an 'iptables failsafe' (by un-commenting the last 
line) while you're fiddling about.

-- 
Thanks in advance,
-------------------------------------------------------------------------
Steve Edwards       sedwards at sedwards.com      Voice: +1-760-468-3867 PST
Newline                                              Fax: +1-760-731-3000