webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-23 17:32:57 +02:00
Code Issues Packages Projects Releases Wiki Activity

iptables: Cleanup creating the OVPNBLOCK chain.

Browse Source 
This should happen after the CUSTOM* chains.
This commit is contained in:
Michael Tremer
2013-07-08 15:36:45 +02:00
parent 3b9a23ce07
commit 1e55533052
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/initscripts/init.d/firewall
View File

@@ -85,13 +85,10 @@ iptables_init() {
/sbin/iptables -A INPUT -j CUSTOMINPUT
/sbin/iptables -N GUARDIAN
/sbin/iptables -A INPUT -j GUARDIAN
/sbin/iptables -N OVPNBLOCK
/sbin/iptables -A FORWARD -j OVPNBLOCK
/sbin/iptables -A FORWARD -j GUARDIAN
/sbin/iptables -N CUSTOMFORWARD
/sbin/iptables -A FORWARD -j CUSTOMFORWARD
/sbin/iptables -N CUSTOMOUTPUT
/sbin/iptables -A OUTPUT -j OVPNBLOCK
/sbin/iptables -A OUTPUT -j CUSTOMOUTPUT
/sbin/iptables -N OUTGOINGFW
/sbin/iptables -A OUTPUT -j OUTGOINGFW
@@ -102,15 +99,18 @@ iptables_init() {
/sbin/iptables -t nat -A POSTROUTING -j CUSTOMPOSTROUTING
/sbin/iptables -t nat -A POSTROUTING -j OVPNNAT
# Block OpenVPN transfer networks
/sbin/iptables -N OVPNBLOCK
for i in INPUT FORWARD OUTPUT; do
/sbin/iptables -A ${i} -j OVPNBLOCK
done
# IPTV chains for IGMPPROXY
/sbin/iptables -N IPTVINPUT
/sbin/iptables -A INPUT -j IPTVINPUT
/sbin/iptables -N IPTVFORWARD
/sbin/iptables -A FORWARD -j IPTVFORWARD
# Filtering ovpn networks INPUT
/sbin/iptables -A INPUT -j OVPNBLOCK
# filtering from GUI
/sbin/iptables -N GUIINPUT
/sbin/iptables -A INPUT -j GUIINPUT