webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 11:43:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

syslog: Listen to network and block access from anywhere but localhost

Browse Source 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2018-11-07 12:29:19 +00:00
parent 6104f2e816
commit 9f60aa9679
2 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
config/firewall/firewall-policy
View File

@@ -57,6 +57,18 @@ HAVE_OPENVPN="true"
# INPUT
# Drop syslog from anywhere but localhost
# sysklogd cannot bind to specific interface and therefore we need to
# block access by adding firewall rules
case "${FWPOLICY}" in
REJECT)
iptables -A POLICYIN -p udp --dport 514 -j REJECT --reject-with icmp-host-unreachable
;;
*)
iptables -A POLICYIN -p udp --dport 514 -j DROP
;;
esac
# Allow access from GREEN
if [ -n "${GREEN_DEV}" ]; then
iptables -A POLICYIN -i "${GREEN_DEV}" -j ACCEPT