Hack The Sec-Leading Resource Of Linux Tutorial: Security

How To Protect SSH/FTP using Fail2ban on CentOS/RHEL

<div dir="ltr" style="text-align: left;" trbidi="on">
<span style="background-color: white; border: 0px; color: #555555; font-family: 'Roboto Slab'; font-size: 16px; font-weight: 700; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"></span><br />
<h2 class="title single-title title20" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #990000;">Protect SSH/FTP using Fail2ban on <span style="color: #990000;"><a href="http://www.hackthesec.co.in/search/label/Centos" target="_blank">CentOS</a>/<a href="http://www.hackthesec.co.in/search/label/RHEL" target="_blank">RHEL</a></span></span></h2>
<div>
<br /></div>
<span style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; font-weight: 700; line-height: 28px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Fail2ban</span><span style="background-color: white; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px;"> is very useful application for you, if you are managing security of server, or you are running your own vps or physical server. Fail2ban scan log files created on system and has ability to ban ips which found malicious bassed on configuration rules. We can use it for monitoring various system services logs like Apache, SSH and blog the ips which are trying to breach the system’s security.</span><br />
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvYwtsMX3Bq2_cXxy4niiEgIqf37zBT4OxmPthki2VDo-2_0ZGme6o8Dh9MCx8WbtvpA4_X4oExHdUqhEhJyd4273kHqF-JYwU3ulTphv8qzTenWsVnqudq6s8eqXAhMzZesm-wnqwqIUw/s1600/fail2ban-on-centos_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="272" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgvYwtsMX3Bq2_cXxy4niiEgIqf37zBT4OxmPthki2VDo-2_0ZGme6o8Dh9MCx8WbtvpA4_X4oExHdUqhEhJyd4273kHqF-JYwU3ulTphv8qzTenWsVnqudq6s8eqXAhMzZesm-wnqwqIUw/s640/fail2ban-on-centos_www.hackthesec.co.in.jpg" width="640" /></a></div>
<span style="background-color: white; color: #0b5394; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px;"><br /></span>
<span style="background-color: white; color: #0b5394; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px;">Step 1: Install EPEL RPM Repository</span><br />
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-size: large;"><span style="line-height: 28px;">Fail2ban is available in <a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html" target="_blank">EPEL</a> repository, So make sure you have installed <a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html" target="_blank">EPEL</a> repository in your system or you can use </span><a href="http://www.hackthesec.co.in/2016/01/how-to-install-epel-repo-on-centos-and.html" style="line-height: 28px; outline: none; text-decoration: none;" target="_blank">these instructions</a><span style="line-height: 28px;"> to install it.</span></span></div>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="line-height: 28px;"><br /></span><span style="font-size: 24px; font-weight: bolder; line-height: 34px;"><span style="color: #0b5394;">Step 2: Install Fail2ban Package</span></span></div>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
After installing required repository use yum package manager to install Fail2ban rpm package using following command.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum install fail2ban<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 3: Setup Fail2ban Default Configuration</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Fail2ban provides its own security configuration file <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">/etc/fail2ban/jail.conf</span>, but we need to create a copy of this file as <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">jail.local</span>.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># cp /etc/fail2ban/jail.conf /etc/fail2ban/jail.local<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Now we need to make necessory changes in jail.local file to create ban rules. Edit this file in your favorite editor and make changes in <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">[DEFAULT]</span> section.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># "ignoreip" can be an IP address, a CIDR mask or a DNS host. Fail2ban will use as always allowed, 
# so add your system ip to protect your ip from banned.
<orange style="color: orange;">ignoreip = 127.0.0.1/8 192.168.1.0/24 11.22.33.44</orange>

# "bantime" is the total number of seconds that a host is banned (3600sec = 1 Hour ).
<orange style="color: orange;">bantime  = 3600</orange>

# A host is banned if it has generated "maxretry" during the last "findtime" seconds. as per below 
# settings, 2 minutes
<orange style="color: orange;">findtime  = 120</orange>

# "maxretry" is the number of failures before a host get banned.
<orange style="color: orange;">maxretry = 3 </orange><span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 4: Protect SSH/SFTP</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
After completing default configuration, go down in the same file jail.local and update <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">[ssh-iptables]</span> section as below.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">enabled  = true
filter   = sshd
action   = iptables[name=SSH, port=22, protocol=tcp]
           sendmail-whois[name=SSH, dest=root, sender=admin@hackthesec.co.in, sendername="Fail2Ban"]
logpath  = /var/log/secure
maxretry = 3<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 5: Protect FTP (vsFTPd) Server</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
Let’s protect your FTP (vsFTPd) server, Find the below entry of <span style="border-image-outset: initial; border-image-repeat: initial; border-image-slice: initial; border-image-source: initial; border-image-width: initial; border: 0px; font-size: inherit; font-weight: 700; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">[vsftpd-iptables]</span> section and make changes as below. If you are not using vsFTPd, you can skip this section.</div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;">[vsftpd-iptables]

enabled  = true
filter   = vsftpd
action   = iptables[name=VSFTPD, port=21, protocol=tcp]
           sendmail-whois[name=VSFTPD, dest=admin@hackthesec.co.in]
logpath  = /var/log/vsftpd.log
maxretry = 5
bantime  = 1800<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Step 6: Restart Fail2ban Service</span></h2>
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
After making all the changes save your file and restart Fail2ban service using following command.</div>
<br />
<div style="background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="single-post-ad" style="background-color: white; border: 0px; clear: both; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<br />
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"># service fail2ban restart
# chkconfig fail2ban on<span style="font-size: 0.9em;">
</span></pre>
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"><a href="http://www.hackthesec.co.in/" target="_blank">Hack The Security</a>
<a href="https://www.twitter.com/hackthesecurity" target="_blank">Hack The Security Twitter</a>
<a href="http://facebook.com/htsecu" target="_blank">Hack The Security Facebook</a></pre>
</div>

How To Protect SSH/FTP using Fail2ban on CentOS/RHEL

Protect SSH/FTP using Fail2ban on CentOS / RHEL Fail2ban is very useful application for you, if you are managing security of server, ...

How do I Install and Use Iptables on CentOS/RHEL 7

<div dir="ltr" style="text-align: left;" trbidi="on">
<h2 class="title single-title title20" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 28px; line-height: 38px; margin: 0px 0px 5px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #990000;">How do I Install and Use Iptables on CentOS/RHEL 7</span></h2>
<div>
<br /></div>
<div style="text-align: left;">
<span style="font-family: "verdana" , sans-serif;"><span style="background-color: white; line-height: 28px;">Latest Linux operating systems like CentOS/RedHat 7 and Fedora 21 has stop using iptables and start now using dynamic firewall daemon firewalld which provides a dynamically managed firewall. It supports for network and zones to assign a level of trust to a network, connections and interfaces. Firewalld also provides and interface for services or applications to add firewall rules directly. This article will help you to disable firewalld service and then install and use iptables on CentOS and Red Hat 7 Systems. </span><a href="https://fedoraproject.org/wiki/FirewallD" style="background-color: white; line-height: 28px; outline: none; text-decoration: none;" target="_blank">Visit here</a><span style="background-color: white; line-height: 28px;"> to read more about firewallD.</span></span></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnwJqO5t-cjYlTKJwDUOWpBE6hpcStrXARypGodCji4qUFUgtg2ocsVUHZGm_VaZJARKMRjmnlgIDhOUHWEO5wTG0-oclNxRCZpvAiHMjuATmAULsaXKwqEUTKSxNrB7g385tyZmzbc_ZT/s1600/firewall_www.hackthesec.co.in.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgnwJqO5t-cjYlTKJwDUOWpBE6hpcStrXARypGodCji4qUFUgtg2ocsVUHZGm_VaZJARKMRjmnlgIDhOUHWEO5wTG0-oclNxRCZpvAiHMjuATmAULsaXKwqEUTKSxNrB7g385tyZmzbc_ZT/s1600/firewall_www.hackthesec.co.in.jpg" /></a></div>
<div>
<span style="font-family: "arial" , "helvetica" , sans-serif;"><span style="background-color: white; line-height: 28px;"><br /></span></span></div>
<div>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Disable Firewalld Service</span></h2>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Before installing and using iptables services on CentOS and Red Hat 7 systems, we need to disable firewalld service. To completely disable firewalld service use following commands.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># systemctl <orange style="color: orange;">stop</orange> firewalld
# systemctl <orange style="color: orange;">mask</orange> firewalld<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now check firewalld status</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">systemctl status firewalld</orange>

firewalld.service
   Loaded: masked (/dev/null)
   Active: inactive (dead) since Fri 2015-02-27 11:09:37 EST; 56s ago
 Main PID: 7411 (code=exited, status=0/SUCCESS)

Feb 27 11:02:18 svr10 systemd[1]: Started firewalld - dynamic firewall daemon.
Feb 27 11:09:36 svr10 systemd[1]: Stopping firewalld - dynamic firewall daemon...
Feb 27 11:09:37 svr10 systemd[1]: Stopped firewalld - dynamic firewall daemon.<span style="font-size: 0.9em;">
</span></pre>
<h2 class="heading1" style="-webkit-transition: opacity 0.24s ease-in-out; background-color: white; border: 0px; font-family: 'Roboto Slab'; font-size: 24px; font-weight: bolder; line-height: 34px; margin: 45px 0px 12px; opacity: 1; outline: 0px; padding: 0px; transition: opacity 0.24s ease-in-out; vertical-align: baseline; visibility: visible;">
<span style="color: #0b5394;">Install Iptables Service in CentOS/RHEL 7</span></h2>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now install iptables service using yum package manager using following command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># yum install iptables-services -y<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">After installing enable iptables service and start using below commands.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># systemctl <orange style="color: orange;">enable</orange> iptables
# systemctl <orange style="color: orange;">start</orange> iptables<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">Now check the iptables service status using below command.</span></div>
<pre style="background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; line-height: 1.3em; margin-bottom: 20px; outline: 0px; overflow: auto; padding: 20px; vertical-align: baseline;"># <orange style="color: orange;">systemctl status iptables</orange>

iptables.service - IPv4 firewall with iptables
   Loaded: loaded (/usr/lib/systemd/system/iptables.service; enabled)
   Active: <green style="color: green;">active (exited)</green> since Fri 2015-02-27 11:14:12 EST; 14s ago
  Process: 7938 ExecStart=/usr/libexec/iptables/iptables.init start (code=exited, status=0/SUCCESS)
 Main PID: 7938 (code=exited, status=0/SUCCESS)

Feb 27 11:14:12 svr10 iptables.init[7938]: iptables: Applying firewall rules: [  OK  ]
Feb 27 11:14:12 svr10 systemd[1]: Started IPv4 firewall with iptables.<span style="font-size: 0.9em;">
</span></pre>
<div style="background-color: white; border: 0px; color: #555555; font-family: 'Roboto Slab'; font-size: 16px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ2VipFy4QxSQUQ8Chyphenhyphenc_kXJDhqJ0gdaTbekB1BVNL7aDj-nzBVatnpVMwsEYzYU7Ws-tlMuavy5zeJaIQPpKuFWHpwhlP5-8YAG37KpxVpRwCckickkCcN0Hbdb5qpkpZWXHz0GN51ioZ/s1600/firewalld-vs-iptables_www.hackthesec.co.in.png" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" height="348" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ2VipFy4QxSQUQ8Chyphenhyphenc_kXJDhqJ0gdaTbekB1BVNL7aDj-nzBVatnpVMwsEYzYU7Ws-tlMuavy5zeJaIQPpKuFWHpwhlP5-8YAG37KpxVpRwCckickkCcN0Hbdb5qpkpZWXHz0GN51ioZ/s640/firewalld-vs-iptables_www.hackthesec.co.in.png" width="640" /></a></div>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
<span style="font-family: "verdana" , sans-serif;">To list iptables rules use following command.</span></div>
<div style="background-color: white; border: 0px; line-height: 28px; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div style="border: 0px; color: #555555; margin-bottom: 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<div class="single-post-ad" style="border: 0px; clear: both; color: #555555; margin: 0px 0px 20px; outline: 0px; padding: 0px; vertical-align: baseline;">
</div>
<br />
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"># <orange style="color: orange;">iptables -L</orange>

Chain INPUT (policy ACCEPT)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     icmp --  anywhere             anywhere
ACCEPT     all  --  anywhere             anywhere
ACCEPT     tcp  --  anywhere             anywhere             state NEW tcp dpt:ssh
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
REJECT     all  --  anywhere             anywhere             reject-with icmp-host-prohibited

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination<span style="font-size: 0.9em;">
</span></pre>
<pre style="-webkit-text-stroke-width: 0px; background: none 0px 0px repeat scroll rgb(60, 60, 60); border-radius: 4px; border: 1px solid rgb(229, 229, 229); color: white; font-size: 0.9em; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 1.3em; margin: 0px 0px 20px; orphans: auto; outline: 0px; overflow: auto; padding: 20px; text-align: start; text-indent: 0px; text-transform: none; vertical-align: baseline; widows: 1; word-spacing: 0px;"><a href="http://www.hackthesec.co.in/">http://www.hackthesec.co.in</a>
<a href="http://www.twitter.com/hackthesecurity">http://www.twitter.com/hackthesecurity</a>
<a href="https://www.facebook.com/htsecu">https://www.facebook.com/htsecu</a>
</pre>
</div>
</div>

How do I Install and Use Iptables on CentOS/RHEL 7

How do I Install and Use Iptables on CentOS/RHEL 7 Latest Linux operating systems like CentOS/RedHat 7 and Fedora 21 has stop using ip...