IPT=/sbin/iptables
$IPT -F
$IPT -P INPUT DROP
$IPT -P OUTPUT DROP
$IPT -A INPUT -p tcp –dport 22 -j ACCEPT
$IPT -A OUTPUT -p tcp –sport 22 -j ACCEPT
$IPT -A INPUT -p udp –dport 5080 -j ACCEPT
$IPT -A OUTPUT -p udp –sport 5080 -j ACCEPT
$IPT -A INPUT -p udp –dport 10000:20000 -j ACCEPT
$IPT -A OUTPUT -p udp –sport 10000:20000 -j ACCEPT
$IPT -A INPUT -4 -p tcp -m state –state NEW -m tcp –syn –dport 5060 -j ACCEPT -m comment –comment «SIP TCP»
$IPT -A INPUT -4 -p udp -m state –state NEW -m udp –dport 5060 -j ACCEPT -m comment –comment «SIP UDP»
$IPT -A INPUT -4 -p udp -m state –state NEW -m multiport –dports 10200:32767 -j ACCEPT -m comment –comment «RTP» $IPT -A OUTPUT -p tcp –dport 53 -j ACCEPT
$IPT -A INPUT -p tcp –sport 53 -j ACCEPT
$IPT -A OUTPUT -p udp –dport 53 -j ACCEPT
$IPT -A INPUT -p udp –sport 53 -j ACCEPT
$IPT -A OUTPUT -p tcp –dport 80 -j ACCEPT
$IPT -A INPUT -p tcp –sport 80 -j ACCEPT
$IPT -A OUTPUT -p tcp –dport 443 -j ACCEPT
$IPT -A INPUT -p tcp –sport 443 -j ACCEPT