webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-04 11:01:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'stevee/next-suricata' into next

Browse Source
This commit is contained in:
Michael Tremer
2019-03-14 13:19:35 +00:00
parent c578cbd35f e776d33c70
commit 01604708c3
57 changed files with 4660 additions and 1678 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/initscripts/system/firewall
View File

@@ -185,6 +185,12 @@ iptables_init() {
iptables -A INPUT -j GUARDIAN
iptables -A FORWARD -j GUARDIAN
# IPS (suricata) chains
iptables -N IPS
iptables -A INPUT -j IPS
iptables -A FORWARD -j IPS
iptables -A OUTPUT -j IPS
# Block non-established IPsec networks
iptables -N IPSECBLOCK
iptables -A FORWARD -m policy --dir out --pol none -j IPSECBLOCK