firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ip6t-firewall-gateway,ipt-firewall-gateway: add support for local mail relay hosts.

Browse Source
This commit is contained in:
Christoph 2024-05-06 17:39:02 +02:00
parent 4388ab6a68
commit af41c79887
2 changed files with 28 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
ip6t-firewall-gateway
View File

@ -2689,6 +2689,20 @@ if [[ ${#mail_server_only_local_ip_arr[@]} -gt 0 ]] ; then
for _dev in ${local_if_arr[@]} ; do
$ip6t -A FORWARD -i $_dev -p tcp -d $_ip --dport $standard_smtp_port -m conntrack --ctstate NEW -j ACCEPT
done
for _dev in ${ext_if_arr[@]} ; do
# Razor2 (TCP Port 2703)
$ip6t -A FORWARD -o $_dev -p tcp --dport 2703 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# Pyzor (UDP Port 24441 or TCP Port 24441 or both ?)
$ip6t -A FORWARD -o $_dev -p tcp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
$ip6t -A FORWARD -o $_dev -p udp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# - DCC (port udp:6277)
$ip6t -A FORWARD -o $_dev -p udp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# if DCC Server is running (port tcp:6277)
$ip6t -A FORWARD -o $_dev -p tcp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
done
fi
# - Note:
@ -2696,6 +2710,7 @@ if [[ ${#mail_server_only_local_ip_arr[@]} -gt 0 ]] ; then
# - special rule.
# -
if $kernel_forward_between_interfaces && $local_alias_interfaces ; then
$ip6t -A FORWARD -p tcp -d $_ip --dport $standard_smtp_port --tcp-flag ACK ACK -j ACCEPT
$ip6t -A FORWARD -p tcp -s $_ip --sport $standard_smtp_port --tcp-flag ACK ACK -j ACCEPT
fi

13
ipt-firewall-gateway
View File

@ -3462,6 +3462,19 @@ if [[ ${#mail_server_only_local_ip_arr[@]} -gt 0 ]] ; then
for _dev in ${local_if_arr[@]} ; do
$ipt -A FORWARD -i $_dev -p tcp -d $_ip --dport $standard_smtp_port -m conntrack --ctstate NEW -j ACCEPT
done
for _dev in ${ext_if_arr[@]} ; do
# Razor2 (TCP Port 2703)
$ipt -A FORWARD -o $_dev -p tcp --dport 2703 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# Pyzor (UDP Port 24441 or TCP Port 24441 or both ?)
$ipt -A FORWARD -o $_dev -p tcp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
$ipt -A FORWARD -o $_dev -p udp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# - DCC (port udp:6277)
$ipt -A FORWARD -o $_dev -p udp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# if DCC Server is running (port tcp:6277)
$ipt -A FORWARD -o $_dev -p tcp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
done
fi
# - Note: