Need a simple set of iptables rules

My local network is 192.168.0.X on x86_64 platform
Can someone please post a basic set of rules and how to install them?
I am on TW 2026/06/03. I could not make heads nor tails of firewalld so i uninstalled it
Thanks

@erbenton why do you need a firewall on your system when it’s on your local network?

To protect it from internet attacks while allowing me to still go out and load webpages

So are you connecting direct to the internet with your system, or going through an internet router? If so, the internet routers firewall will take care of any incoming traffic, or is that off?

What services are you running on your system that would require blocking and what ports are these on?

I would roll back that decision, and actually use firewalld + cockpit to graphically manage it. No need to find out what port is needed, just add services you want and be done with it.

@knurpht I think the user is only surfing the internet…

Mmmm, ever had a script-kiddie in your network? And, we take devices out of our network, right? My take was that it is way easier to do with firewalld than with iptables / nftables.

@knurpht nope… but AFAIKT the user wants to surf the internet, firewall is not going to do anything in that respect if hitting a malicious site…

I have a M5 tp-link mesh router and before that is a cable modem connected to a wired connection to my isp

I understand that, I am mostly concerned with someone hacking in while i am not using the computer but it is still running

So those have firewalls enabled? But as indicated by @knurpht just enable firewalld again and then use Cockpit to configure.

As knurpht mentioned firewalld (public zone) should be enough here. It essentially prevents unsolicited traffic, which is what you’d normally want on a desktop system. Unless you have specific services that need to be reachable from outside, there is usually no need to add additional firewall rules.

1 Like

ok all - thanks

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.