firewall/ipt-gateway
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

ip6t-firewall-gateway,ipt-firewall-gateway: add support for local mail relay hosts.

Browse Source
This commit is contained in:
Christoph
2024-05-06 17:39:02 +02:00
parent 4388ab6a68
commit af41c79887
2 changed files with 28 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
ipt-firewall-gateway
View File

@ -3462,6 +3462,19 @@ if [[ ${#mail_server_only_local_ip_arr[@]} -gt 0 ]] ; then
for _dev in ${local_if_arr[@]} ; do
$ipt -A FORWARD -i $_dev -p tcp -d $_ip --dport $standard_smtp_port -m conntrack --ctstate NEW -j ACCEPT
done
for _dev in ${ext_if_arr[@]} ; do
# Razor2 (TCP Port 2703)
$ipt -A FORWARD -o $_dev -p tcp --dport 2703 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# Pyzor (UDP Port 24441 or TCP Port 24441 or both ?)
$ipt -A FORWARD -o $_dev -p tcp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
$ipt -A FORWARD -o $_dev -p udp --dport 24441 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# - DCC (port udp:6277)
$ipt -A FORWARD -o $_dev -p udp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
# if DCC Server is running (port tcp:6277)
$ipt -A FORWARD -o $_dev -p tcp --dport 6277 -s $_ip -m conntrack --ctstate NEW -j ACCEPT
done
fi
# - Note: