Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in
Toggle navigation
Menu
Open sidebar
La Quadrature du Net
JabberService
Commits
5ee349e5
Commit
5ee349e5
authored
Aug 22, 2014
by
Benjamin Sonntag
Browse files
adding basic iptables configuration, TODO: add --user prosody limits + connection tracking
parent
a3263b01
Changes
1
Hide whitespace changes
Inline
Side-by-side
iptables/iptables.sh
View file @
5ee349e5
...
...
@@ -56,6 +56,13 @@ do
iptables
-A
IN_STANDARD
-p
tcp
--dport
22
-s
$ip
-j
ACCEPT
iptables
-A
OUT_STANDARD
-p
tcp
--sport
22
-d
$ip
-j
ACCEPT
done
# Outgoing ssh : to github ;)
for
ip
in
192.30.252.0/22
do
iptables
-A
OUT_STANDARD
-p
tcp
--dport
22
-d
$ip
-j
ACCEPT
iptables
-A
IN_STANDARD
-p
tcp
--sport
22
-s
$ip
-j
ACCEPT
done
# BUG WITH "--limit" module on LXC, don't use it for now ...
iptables
-A
OUT_STANDARD
-p
icmp
-j
ACCEPT
iptables
-A
IN_STANDARD
-p
icmp
-j
ACCEPT
...
...
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment