From 1601dfe1bc464d3b60905a2c02e44a41c1a8e701 Mon Sep 17 00:00:00 2001 From: Astro Date: Thu, 25 Jun 2020 20:42:16 +0200 Subject: [PATCH] mgmt-gw firewall: update --- salt/firewall/mgmt-gw.sh | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/salt/firewall/mgmt-gw.sh b/salt/firewall/mgmt-gw.sh index 3a5a179..6dbdf8c 100644 --- a/salt/firewall/mgmt-gw.sh +++ b/salt/firewall/mgmt-gw.sh @@ -21,11 +21,9 @@ if [ "$IFACE" = "{{ interface }}" ]; then # collectd iptables -A FORWARD -i $IFACE -p udp --dport 25826 -j ACCEPT ip6tables -A FORWARD -i $IFACE -p udp --dport 25826 -j ACCEPT - # downloads.lede-project.org - iptables -A FORWARD -i $IFACE --dest 148.251.78.235 -j ACCEPT - ip6tables -A FORWARD -i $IFACE --dest 2a01:4f8:202:43ea::3 -j ACCEPT - # archive.openwrt.org - iptables -A FORWARD -i $IFACE --dest 81.0.124.218 -j ACCEPT + # downloads.openwrt.org + iptables -A FORWARD -i $IFACE --dest 176.9.48.73 -j ACCEPT + ip6tables -A FORWARD -i $IFACE --dest 2a01:4f8:150:6449::2 -j ACCEPT # radius.hq.c3d2.de iptables -A FORWARD -i $IFACE --dest 172.22.99.22 -j ACCEPT # Deny by default