[Spce-user] Custom firewall rules

[Andres Ruiz]

Hi, I would to like add some rules on spce. I know that RTPENGINE chain is
very important for good performance.

Firewall look like this:

-P INPUT ACCEPT
-P FORWARD ACCEPT
-P OUTPUT ACCEPT
-N fail2ban-ssh
-N rtpengine
-A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh
-A INPUT -j rtpengine
-A fail2ban-ssh -j RETURN
-A rtpengine -p udp -j RTPENGINE --id 0

What is the key to not losing performance?

Thanks in advance.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.sipwise.com/mailman/private/spce-user_lists.sipwise.com/attachments/20160913/24cc2ac0/attachment.html>