webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-04-28 03:33:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add "GEOIPBLOCK" chains to firewall initscript.

Browse Source
This commit is contained in:
Stefan Schantl
2015-01-04 00:57:23 +01:00
parent 484e01fc37
commit cab02e2a5f
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/initscripts/init.d/firewall
View File

@@ -179,6 +179,11 @@ iptables_init() {
iptables -A OUTPUT -o "${BLUE_DEV}" -j DHCPBLUEOUTPUT iptables -A OUTPUT -o "${BLUE_DEV}" -j DHCPBLUEOUTPUT
fi fi
# GeoIP block
iptables -N GEOIPBLOCK
iptables -A INPUT -j GEOIPBLOCK
iptables -A FORWARD -j GEOIPBLOCK
# trafic from ipsecX/TUN/TAP interfaces, before "-i GREEN_DEV" accept everything # trafic from ipsecX/TUN/TAP interfaces, before "-i GREEN_DEV" accept everything
iptables -N IPSECINPUT iptables -N IPSECINPUT
iptables -N IPSECFORWARD iptables -N IPSECFORWARD