2017-02-07 01:16:16 +01:00
|
|
|
#!/bin/sh
|
|
|
|
|
2017-11-12 00:33:29 +01:00
|
|
|
export PATH=/sbin:/bin:/usr/sbin:/usr/bin
|
|
|
|
|
2017-12-11 00:36:10 +01:00
|
|
|
if [ "$IFACE" = "{{ interface }}" ]; then
|
|
|
|
iptables -F FORWARD
|
|
|
|
ip6tables -F FORWARD
|
|
|
|
iptables -P FORWARD DROP
|
|
|
|
ip6tables -P FORWARD DROP
|
|
|
|
iptables -A FORWARD -m state --state ESTABLISHED -j ACCEPT
|
|
|
|
ip6tables -A FORWARD -m state --state ESTABLISHED -j ACCEPT
|
2018-01-20 18:43:19 +01:00
|
|
|
# loopback
|
|
|
|
iptables -A FORWARD -i lo -j ACCEPT
|
|
|
|
ip6tables -A FORWARD -i lo -j ACCEPT
|
2017-12-11 00:36:10 +01:00
|
|
|
# DNS
|
|
|
|
iptables -A FORWARD -i $IFACE -p udp --dport 53 -j ACCEPT
|
|
|
|
ip6tables -A FORWARD -i $IFACE -p udp --dport 53 -j ACCEPT
|
|
|
|
# NTP
|
|
|
|
iptables -A FORWARD -i $IFACE -p udp --dport 123 -j ACCEPT
|
|
|
|
ip6tables -A FORWARD -i $IFACE -p udp --dport 123 -j ACCEPT
|
|
|
|
# collectd
|
|
|
|
iptables -A FORWARD -i $IFACE -p udp --dport 25826 -j ACCEPT
|
|
|
|
ip6tables -A FORWARD -i $IFACE -p udp --dport 25826 -j ACCEPT
|
2020-06-25 20:42:16 +02:00
|
|
|
# downloads.openwrt.org
|
|
|
|
iptables -A FORWARD -i $IFACE --dest 176.9.48.73 -j ACCEPT
|
|
|
|
ip6tables -A FORWARD -i $IFACE --dest 2a01:4f8:150:6449::2 -j ACCEPT
|
2017-12-11 00:36:10 +01:00
|
|
|
# radius.hq.c3d2.de
|
|
|
|
iptables -A FORWARD -i $IFACE --dest 172.22.99.22 -j ACCEPT
|
|
|
|
# Deny by default
|
|
|
|
iptables -A FORWARD -j REJECT
|
|
|
|
ip6tables -A FORWARD -j REJECT
|
|
|
|
fi
|