mirror of
https://github.com/vincentmli/bpfire.git
synced 2026-05-08 05:56:11 +02:00
Forward Firewall: rules for collectd now in firewall-policy instead of /etc/init.d/firewall
This commit is contained in:
committed by
Michael Tremer
parent
53f4c74d9b
commit
aff15defbc
@@ -31,6 +31,7 @@ else
|
||||
/sbin/iptables -A POLICYFWD -i blue0 ! -o $IFACE -j DROP
|
||||
fi
|
||||
/sbin/iptables -A POLICYFWD -j ACCEPT
|
||||
/sbin/iptables -A POLICYFWD -m comment --comment "DROP_FORWARD" -j DROP
|
||||
fi
|
||||
|
||||
#OUTGOINGFW
|
||||
@@ -49,6 +50,7 @@ if [ "$POLICY1" == "MODE1" ]; then
|
||||
fi
|
||||
else
|
||||
/sbin/iptables -A POLICYOUT -j ACCEPT
|
||||
/sbin/iptables -A POLICYOUT -m comment --comment "DROP_OUTPUT" -j DROP
|
||||
fi
|
||||
#INPUT
|
||||
if [ "$FWPOLICY2" == "REJECT" ]; then
|
||||
@@ -63,3 +65,5 @@ if [ "$FWPOLICY2" == "DROP" ]; then
|
||||
fi
|
||||
/sbin/iptables -A POLICYIN -j DROP -m comment --comment "DROP_INPUT"
|
||||
fi
|
||||
|
||||
exit 0
|
||||
|
||||
Reference in New Issue
Block a user