webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-10 19:15:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

iptables: Create guardian's chains after the CUSTOM* chains.

Browse Source
This commit is contained in:
Michael Tremer
2013-07-08 15:38:39 +02:00
parent 1e55533052
commit 815eaff433
1 changed files with 5 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
src/initscripts/init.d/firewall
View File

@@ -83,9 +83,6 @@ iptables_init() {
# CUSTOM chains, can be used by the users themselves
/sbin/iptables -N CUSTOMINPUT
/sbin/iptables -A INPUT -j CUSTOMINPUT
/sbin/iptables -N GUARDIAN
/sbin/iptables -A INPUT -j GUARDIAN
/sbin/iptables -A FORWARD -j GUARDIAN
/sbin/iptables -N CUSTOMFORWARD
/sbin/iptables -A FORWARD -j CUSTOMFORWARD
/sbin/iptables -N CUSTOMOUTPUT
@@ -99,6 +96,11 @@ iptables_init() {
/sbin/iptables -t nat -A POSTROUTING -j CUSTOMPOSTROUTING
/sbin/iptables -t nat -A POSTROUTING -j OVPNNAT
# Guardian (IPS) chains
/sbin/iptables -N GUARDIAN
/sbin/iptables -A INPUT -j GUARDIAN
/sbin/iptables -A FORWARD -j GUARDIAN
# Block OpenVPN transfer networks
/sbin/iptables -N OVPNBLOCK
for i in INPUT FORWARD OUTPUT; do