Add Mumble Service out (allow_mumble_request_out).
This commit is contained in:
parent
0f72f2419a
commit
b995c6c4e1
@ -1257,6 +1257,7 @@ allow_irc_request_out=true
|
||||
allow_mysql_request_out=true
|
||||
allow_ipmi_request_out=true
|
||||
allow_remote_console_request_out=true
|
||||
allow_mumble_out=true
|
||||
|
||||
allow_samba_requests_out=true
|
||||
|
||||
|
@ -1195,6 +1195,7 @@ allow_irc_request_out=true
|
||||
allow_mysql_request_out=true
|
||||
allow_ipmi_request_out=true
|
||||
allow_remote_console_request_out=true
|
||||
allow_mumble_out=true
|
||||
|
||||
allow_samba_requests_out=true
|
||||
|
||||
|
@ -1357,7 +1357,6 @@ if $terminal ; then
|
||||
else
|
||||
echo "Add Rules for Services.."
|
||||
fi
|
||||
echo -e "\t\033[37m\033[1mAdd Rules for Services..\033[m"
|
||||
|
||||
|
||||
# ---
|
||||
@ -2839,6 +2838,26 @@ else
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - Mumble Service out only
|
||||
# ---
|
||||
|
||||
echononl "\t\tMumble Service out only"
|
||||
|
||||
if $allow_mumble_request_out ; then
|
||||
for _dev in ${ext_if_arr[@]} ; do
|
||||
$ip6t -A OUTPUT -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then
|
||||
$ip6t -A FORWARD -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
fi
|
||||
done
|
||||
|
||||
echo_done
|
||||
else
|
||||
echo_skipped
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - PGP Keyserver out only
|
||||
# ---
|
||||
|
@ -3548,6 +3548,26 @@ else
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - Mumble Service out only
|
||||
# ---
|
||||
|
||||
echononl "\t\tMumble Service out only"
|
||||
|
||||
if $allow_mumble_request_out ; then
|
||||
for _dev in ${ext_if_arr[@]} ; do
|
||||
$ipt -A OUTPUT -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then
|
||||
$ipt -A FORWARD -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT
|
||||
fi
|
||||
done
|
||||
|
||||
echo_done
|
||||
else
|
||||
echo_skipped
|
||||
fi
|
||||
|
||||
|
||||
# ---
|
||||
# - PGP Keyserver out only
|
||||
# ---
|
||||
|
Loading…
Reference in New Issue
Block a user