network/salt/upstream/iptables

10 lines
248 B
Bash

#!/bin/sh
export PATH=/sbin:/bin:/usr/sbin:/usr/bin
if [ "$IFACE" = "{{ interface }}" ]; then
iptables -A INPUT -i "$IFACE" -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -i "$IFACE" -j DROP
iptables -P INPUT ACCEPT
fi