Add rules for blocking UDP / TCP Ports exern out.
This commit is contained in:
@ -717,6 +717,62 @@ else
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - Block UDP Ports out
|
||||
# ---
|
||||
|
||||
echononl "\tBlock UDP Ports extern out.."
|
||||
|
||||
if [[ ${#block_udp_extern_out_port_arr[@]} -gt 0 ]] ; then
|
||||
echo""
|
||||
|
||||
for _port in ${block_udp_extern_out_port_arr[@]} ; do
|
||||
|
||||
for _dev in ${ext_if_arr[@]} ; do
|
||||
|
||||
$ipt -A OUTPUT -o $_dev -p udp --dport $_port -j DROP
|
||||
|
||||
if $kernel_activate_forwarding ; then
|
||||
$ipt -A FORWARD -o $_dev -p udp --dport $_port -j DROP
|
||||
fi
|
||||
|
||||
done
|
||||
|
||||
done
|
||||
echo_done
|
||||
else
|
||||
echo_skipped
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - Block TCP Ports out
|
||||
# ---
|
||||
|
||||
echononl "\tBlock TCP Ports extern out.."
|
||||
|
||||
if [[ ${#block_tcp_extern_out_port_arr[@]} -gt 0 ]] ; then
|
||||
|
||||
for _port in ${block_tcp_extern_out_port_arr[@]} ; do
|
||||
|
||||
for _dev in ${ext_if_arr[@]} ; do
|
||||
|
||||
$ipt -A OUTPUT -o $_dev -p tcp --dport $_port -j DROP
|
||||
|
||||
if $kernel_activate_forwarding ; then
|
||||
$ipt -A FORWARD -o $_dev -p tcp --dport $_port -j DROP
|
||||
fi
|
||||
|
||||
done
|
||||
|
||||
done
|
||||
echo_done
|
||||
else
|
||||
echo_skipped
|
||||
fi
|
||||
|
||||
|
||||
|
||||
# ---
|
||||
# - Block IPs/Netwoks reading from file 'ban_ipv4.list'"
|
||||
# ---
|
||||
|
Reference in New Issue
Block a user