mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-04-10 11:05:54 +02:00
Forward Firewall: deleted creation of OVPNFORWARD and the accept rule.
This commit is contained in:
committed by
Michael Tremer
parent
ec329c0699
commit
443a6e8a5f
@@ -255,8 +255,8 @@ void setChainRules(char *chain, char *interface, char *protocol, char *port)
|
||||
executeCommand(str);
|
||||
sprintf(str, "/sbin/iptables -A %sINPUT -i tun+ -j ACCEPT", chain);
|
||||
executeCommand(str);
|
||||
sprintf(str, "/sbin/iptables -A %sFORWARD -i tun+ -j ACCEPT", chain);
|
||||
executeCommand(str);
|
||||
//sprintf(str, "/sbin/iptables -A %sFORWARD -i tun+ -j ACCEPT", chain);
|
||||
//executeCommand(str);
|
||||
}
|
||||
|
||||
void flushChain(char *chain) {
|
||||
@@ -264,8 +264,8 @@ void flushChain(char *chain) {
|
||||
|
||||
sprintf(str, "/sbin/iptables -F %sINPUT", chain);
|
||||
executeCommand(str);
|
||||
sprintf(str, "/sbin/iptables -F %sFORWARD", chain);
|
||||
executeCommand(str);
|
||||
//sprintf(str, "/sbin/iptables -F %sFORWARD", chain);
|
||||
//executeCommand(str);
|
||||
safe_system(str);
|
||||
}
|
||||
|
||||
@@ -282,8 +282,8 @@ void deleteChainReference(char *chain) {
|
||||
sprintf(str, "/sbin/iptables -D INPUT -j %sINPUT", chain);
|
||||
executeCommand(str);
|
||||
safe_system(str);
|
||||
sprintf(str, "/sbin/iptables -D FORWARD -j %sFORWARD", chain);
|
||||
executeCommand(str);
|
||||
//sprintf(str, "/sbin/iptables -D FORWARD -j %sFORWARD", chain);
|
||||
//executeCommand(str);
|
||||
safe_system(str);
|
||||
}
|
||||
|
||||
@@ -292,8 +292,8 @@ void deleteChain(char *chain) {
|
||||
|
||||
sprintf(str, "/sbin/iptables -X %sINPUT", chain);
|
||||
executeCommand(str);
|
||||
sprintf(str, "/sbin/iptables -X %sFORWARD", chain);
|
||||
executeCommand(str);
|
||||
//sprintf(str, "/sbin/iptables -X %sFORWARD", chain);
|
||||
//executeCommand(str);
|
||||
}
|
||||
|
||||
void deleteAllChains(void) {
|
||||
@@ -313,16 +313,16 @@ void createChainReference(char *chain) {
|
||||
char str[STRING_SIZE];
|
||||
sprintf(str, "/sbin/iptables -I INPUT %s -j %sINPUT", "14", chain);
|
||||
executeCommand(str);
|
||||
sprintf(str, "/sbin/iptables -I FORWARD %s -j %sFORWARD", "12", chain);
|
||||
executeCommand(str);
|
||||
//sprintf(str, "/sbin/iptables -I FORWARD %s -j %sFORWARD", "12", chain);
|
||||
//executeCommand(str);
|
||||
}
|
||||
|
||||
void createChain(char *chain) {
|
||||
char str[STRING_SIZE];
|
||||
sprintf(str, "/sbin/iptables -N %sINPUT", chain);
|
||||
executeCommand(str);
|
||||
sprintf(str, "/sbin/iptables -N %sFORWARD", chain);
|
||||
executeCommand(str);
|
||||
//sprintf(str, "/sbin/iptables -N %sFORWARD", chain);
|
||||
//executeCommand(str);
|
||||
}
|
||||
|
||||
void createAllChains(void) {
|
||||
|
||||
Reference in New Issue
Block a user