There is a server without any iptables defense: ACCEPT all..There could be custom applications on this server. If we should need to harden this server (so deny all, and only let what is needed by the applications) with strict iptables rules, we have to find out by hand that which app uses which dst/src port/protocol and then we have to write the iptables rules for them..The question: are there any scripts that can help collecting these informations from a running machine? (from the logs?) - And automatically generating the iptables rules?Like there is the audit2allow on SELinux. Just for iptables!The machine cannot have any outage!Ex.: the MAGIC script should run a week/month on the machine, collecting informations, then, after a week/month, the script will be able to produce an iptables rule file that we can use. Many people could get in this situation (how to harden a server regarding iptables). And it would be great if there were a script/solution that can do this :\
iptables rule adviser script
linux;iptables;firewall