#!/bin/bash
sudo iptables --policy FORWARD DROP
sudo iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
sudo iptables -A INPUT -i lo -j ACCEPT
sudo iptables -A INPUT -p icmp --icmp-type echo-request -m state --state NEW -j ACCEPT
sudo iptables -A INPUT -p tcp -m tcp --dport 9000 -m state --state NEW -j ACCEPT
sudo iptables -A INPUT -p tcp -m tcp --dport 9100 -m state --state NEW -j ACCEPT
sudo iptables -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT # port dla SSH
sudo iptables --policy INPUT DROP