Freesco, NND, CDN, EOS

    # zaplotkuj jesli nie chcesz udostepniac serwera IMAPS do inetu
    if [ "$IMAPS" = "1" ]; then
   $i -A INPUT -p tcp -i $EXTIF --dport 993 -j ACCEPT
   $i -A INPUT -p udp -i $EXTIF --dport 993 -j ACCEPT
    fi

    # pingi pozwalamy
    $i -A INPUT -p icmp --icmp-type echo-request -j ACCEPT -m limit --limit 1/sec
# To jest bardzo dobre miejsce na wlasne reguly zarowno blokujace jak i przepuszczajace.

root@serwer:~$nmap www.wp.pl -p 80

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Interesting ports on www.wp.pl (212.77.100.101):
Port       State       Service
80/tcp     open        http

Nmap run completed -- 1 IP address (1 host up) scanned in 5 seconds
root@serwer:~$iptables -A OUTPUT -d www.wp.pl -p tcp --dport 80 -j DROP
root@serwer:~$nmap www.wp.pl -p 80

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 212.77.100.101, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 212.77.100.101, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 212.77.100.101, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 212.77.100.101, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 212.77.100.101, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 212.77.100.101, 16) => Operation not permitted
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 212.77.100.101, 16) => Operation not permitted
Interesting ports on www.wp.pl (212.77.100.101):
Port       State       Service
80/tcp     filtered    http

Nmap run completed -- 1 IP address (1 host up) scanned in 2 seconds
root@serwer:~$iptables -D OUTPUT -d www.wp.pl -p tcp --dport 80 -j DROP
root@serwer:~$nmap www.wp.pl -p 80

Starting nmap V. 3.00 ( www.insecure.org/nmap/ )
Interesting ports on www.wp.pl (212.77.100.101):
Port       State       Service
80/tcp     open        http

Nmap run completed -- 1 IP address (1 host up) scanned in 0 seconds