http://ocotal.iarc.uaf.edu/index.php?action=history&feed=atom&title=Decommisioned_Serial_Server_Config_and_notes 2026-05-12T23:09:52Z Revision history for this page on the wiki MediaWiki 1.34.2 http://ocotal.iarc.uaf.edu/index.php?title=Decommisioned_Serial_Server_Config_and_notes&diff=2997&oldid=prev 2016-09-20T21:18:23Z

<p>Created page with &quot;/etc/network/interfaces &lt;pre&gt; auto lo iface lo inet loopback auto eth0 iface eth0 inet dhcp post-up /home/bob/bin/xmitip.sh #iface eth0 inet static # address 199.165.12...&quot;</p> <p><b>New page</b></p><div>/etc/network/interfaces<br /> &lt;pre&gt;<br /> auto lo<br /> iface lo inet loopback<br /> auto eth0<br /> iface eth0 inet dhcp<br /> post-up /home/bob/bin/xmitip.sh<br /> <br /> #iface eth0 inet static<br /> # address 199.165.126.161<br /> # gateway 199.165.126.129<br /> # netmask 255.255.255.128<br /> # dns-nameservers 8.8.8.8 8.8.4.4<br /> <br /> &lt;/pre&gt;<br /> /etc/ser2net.conf<br /> &lt;pre&gt;<br /> # BNZ Radio<br /> 6786:raw:25:/root/devices/bnz_radio:57600 8DATABITS NONE 1STOPBIT HANGUP_WHEN_DONE RTSCTS LOCAL<br /> # IARC radio<br /> 7808:raw:25:/root/devices/iarc_radio:57600 8DATABITS NONE 1STOPBIT HANGUP_WHEN_DONE RTSCTS LOCAL<br /> # IARC CR10<br /> 7809:raw:25:/dev/ttyUSB2:9600 8DATABITS NONE 1STOPBIT HANGUP_WHEN_DONE RTSCTS LOCAL<br /> &lt;/pre&gt;<br /> /etc/iptables.firewall.rules<br /> &lt;pre&gt;<br /> *filter<br /> :INPUT DROP [0:0]<br /> :FORWARD ACCEPT [0:0]<br /> :OUTPUT ACCEPT [0:0]<br /> <br /> # from Jim:<br /> -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT<br /> <br /> <br /> <br /> # Allow all loopback (lo0) traffic and drop all traffic to 127/8 that doesn't use lo0<br /> -A INPUT -i lo -j ACCEPT<br /> -A INPUT -d 127.0.0.0/8 -j REJECT<br /> -A INPUT -s 137.229.94.2 -d 244.0.0.1 -j ACCEPT<br /> #-A INPUT -s 224.0.0.1 -p udp -m udp -j ACCEPT<br /> <br /> # Accept all established inbound connections<br /> -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT<br /> <br /> # Allow all outbound traffic - you can modify this to only allow certain traffic<br /> -A OUTPUT -j ACCEPT<br /> <br /> # Allow HTTP and HTTPS connections from anywhere (the normal ports for websites and SSL).<br /> #-A INPUT -p tcp --dport 80 -j ACCEPT<br /> #-A INPUT -p tcp --dport 443 -j ACCEPT<br /> <br /> -A INPUT -s 192.168.0.0/16 -p tcp -m tcp --dport 6786 -j ACCEPT<br /> -A INPUT -s 137.229.0.0/16 -p tcp -m tcp --dport 6786 -j ACCEPT<br /> -A INPUT -s 127.0.0.0/8 -p tcp -m tcp --dport 6786 -j ACCEPT<br /> -A INPUT -s 0.0.0.0/0 -p tcp --dport 6786 -j DROP<br /> <br /> -A INPUT -s 192.168.0.0/16 -p tcp -m tcp --dport 7808 -j ACCEPT<br /> -A INPUT -s 137.229.0.0/16 -p tcp -m tcp --dport 7808 -j ACCEPT<br /> -A INPUT -s 127.0.0.0/8 -p tcp -m tcp --dport 7808 -j ACCEPT<br /> -A INPUT -s 0.0.0.0/0 -p tcp --dport 7808 -j DROP<br /> <br /> -A INPUT -s 137.229.0.0/16 -p tcp -m tcp --dport 7809 -j ACCEPT<br /> -A INPUT -s 192.168.0.0/16 -p tcp -m tcp --dport 7809 -j ACCEPT<br /> -A INPUT -s 127.0.0.0/8 -p tcp -m tcp --dport 7809 -j ACCEPT<br /> -A INPUT -s 0.0.0.0/0 -p tcp --dport 7809 -j DROP<br /> <br /> <br /> -A INPUT -s 137.229.0.0/16 -p udp -m udp -j ACCEPT<br /> <br /> # Allow SSH connections<br /> #<br /> # The -dport number should be the same port number you set in sshd_config<br /> #<br /> -A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT<br /> <br /> # Allow ping<br /> -A INPUT -p icmp --icmp-type echo-request -j ACCEPT<br /> <br /> # Log iptables denied calls (disabled once I saw what all was getting blocked)<br /> ##-A INPUT -m limit --limit 5/min -j LOG --log-prefix &quot;iptables denied: &quot; --log-level 7<br /> <br /> # Drop all other inbound - default deny unless explicitly allowed policy<br /> -A INPUT -j DROP<br /> -A FORWARD -j DROP<br /> <br /> COMMIT<br /> &lt;/pre&gt;</div>

137.229.92.136