Elastix iptables 관련

---

# Generated by iptables-save v1.3.5 on Fri Jun  2 07:48:53 2017

*nat

:PREROUTING ACCEPT [3:1114]

:POSTROUTING ACCEPT [3:1893]

:OUTPUT ACCEPT [3:1893]

COMMIT

# Completed on Fri Jun  2 07:48:53 2017

# Generated by iptables-save v1.3.5 on Fri Jun  2 07:48:53 2017

*filter

:INPUT ACCEPT [17338372924:1821524839798]

:FORWARD ACCEPT [0:0]

:OUTPUT ACCEPT [17011476790:1766261084899]

:ELASTIX_FORWARD - [0:0]

:ELASTIX_INPUT - [0:0]

:ELASTIX_OUTPUT - [0:0]

-A INPUT -j ELASTIX_INPUT 

-A FORWARD -j ELASTIX_FORWARD 

-A OUTPUT -j ELASTIX_OUTPUT 

-A ELASTIX_FORWARD -j REJECT --reject-with icmp-port-unreachable 

-A ELASTIX_INPUT -i lo -j ACCEPT 

-A ELASTIX_INPUT -p icmp -j ACCEPT 

-A ELASTIX_INPUT -p udp -m udp --dport 5004:5082 -j ACCEPT 

-A ELASTIX_INPUT -p udp -m udp --dport 4569 -j ACCEPT 

-A ELASTIX_INPUT -p udp -m udp --dport 5036 -j ACCEPT 

-A ELASTIX_INPUT -p udp -m udp --dport 10000:20000 -j ACCEPT 

-A ELASTIX_INPUT -p udp -m udp --dport 2727 -j ACCEPT 

-A ELASTIX_INPUT -p udp -m udp --sport 53 -j ACCEPT 

-A ELASTIX_INPUT -p udp -m udp --dport 69 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 22 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 25 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 80 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 110 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 143 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 443 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 993 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 995 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 5222 -j ACCEPT 

-A ELASTIX_INPUT -p tcp -m tcp --dport 9090 -j ACCEPT 

-A ELASTIX_INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 

-A ELASTIX_INPUT -j REJECT --reject-with icmp-port-unreachable 

COMMIT

# Completed on Fri Jun  2 07:48:53 2017

1. 어떻게 iptables 로 접근했는가?  - ssh root 계정을 통했을 거라 추측

방안은? root 의 원격 접근을 막는 방법이 있겠지만, 아직 어떤 문제가 발생할지 모른다..조사..

---