SSH and Iptables

[toniozz]

Hi,

It's not an issue on Arch ARM but i can't find the answer on the web. I manage my RPi (it's a web server) with SSH without an other way to connect to. In order to improve security, i want to setup iptables. I have studied the different rules to implement (network guidelines, ...) and i'm ready to configure it. But if i do: iptables -P INPUT DROP, i can't access to the server with SSH and i don't want to lose my access (the only way to resolve the issue in this case is to access the SD card with QEMU).
Anyone faced with this problem ?

Thanks
Antoine

[summers]

well I use nftables. But concept is similar. You need to accept port 22 on the input chain before you drop everything on input. Now don't recall how you order rules in iptables, but it will be in the documentation. You'll also want to accept related and established connections, so you can get replies to inet queries. This should be described in most iptables howto, its all fairly standard.

[toniozz]

Hi,

Thank you ! I will apply your advice. Yes, i saw that the order of the rules is highly important. That's why i post this question before do anything.

Antoine