protecteyourreto.sh

#!/bin/sh
###############################################################
##  Faioli a.k.a: 0xttfx.
## An implementation of a firewall to protect your butt! was an
## idea by my friend Abu a.k.a: Abu_C_Taí , at the H2HC 2018
## conference! I ended up implementing in an IPFW :)
###############################################################

#global variables
cu=Orificio Rugoso
cmd=/sbin/ipfw -q add
deny="deny log logamount 1000"

# protect your reto
${cmd} ${deny} all from any to me dst-port ${cu}
${cmd} ${deny} all from any to any

## ipfw built-in default, don't uncomment
## ${cmd} deny ip from any to any