brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Custom chains work...

master
bbruns 2014-02-16 20:44:23 +00:00
parent e234bf1a17
commit b423c982d9
1 changed files with 9 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
bin/firewall-sosdg
View File

@ -202,15 +202,17 @@ if [ "$IPTABLES_MULTIPORT" ]; then
esac esac
fi fi
# Trying to better clean up some of my code, so lets try using a blackhole target for # Trying to better clean up some of my code, so lets try using some custom chains
# in and out $IPTABLES -N BLACKHOLE
$IPTABLES -N BLACKHOLE-IN $IPTABLES -N TRUSTED
$IPTABLES -N BLACKHOLE-OUT
$IPTABLES -A INPUT -j TRUSTED
$IPTABLES -A OUTPUT -j TRUSTED
$IPTABLES -A INPUT -j BLACKHOLE
$IPTABLES -A OUTPUT -j BLACKHOLE
$IPTABLES -A TRUSTED -i lo -j ACCEPT
$IPTABLES -A INPUT -i lo -j ACCEPT $IPTABLES -A TRUSTED -o lo -j ACCEPT
$IPTABLES -A OUTPUT -o lo -j ACCEPT
if [ -s "$BASEDIR/include/ipv4_custom_trust" ]; then if [ -s "$BASEDIR/include/ipv4_custom_trust" ]; then
display_c YELLOW "Loading custom trust rules..." display_c YELLOW "Loading custom trust rules..."