zentralwerk/network
zentralwerk
/
network
12
4
Fork 2
Code Issues 4 Pull Requests 1 Releases Wiki Activity

firewall/priv-stateful: fix rules

This commit is contained in:
Astro 2018-04-14 21:50:38 +02:00
parent 7b46fa12f1
commit 483ae6fc9a
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
salt/firewall/priv-stateful.sh
View File

@ -12,8 +12,9 @@ if echo "$IFACE" | grep priv >/dev/null; then
# loopback
iptables -A FORWARD -i lo -j ACCEPT
ip6tables -A FORWARD -i lo -j ACCEPT
# DHCP
iptables -A FORWARD -i $IFACE -p udp --dport 67 -j ACCEPT
# Trust priv
iptables -A FORWARD -i $IFACE -j ACCEPT
ip6tables -A FORWARD -i $IFACE -j ACCEPT
# Deny by default
iptables -A FORWARD -j REJECT
ip6tables -A FORWARD -j REJECT