diff --git a/conf/main_ipv4.conf.sample b/conf/main_ipv4.conf.sample index a00158f..29df1e2 100644 --- a/conf/main_ipv4.conf.sample +++ b/conf/main_ipv4.conf.sample @@ -1257,6 +1257,7 @@ allow_irc_request_out=true allow_mysql_request_out=true allow_ipmi_request_out=true allow_remote_console_request_out=true +allow_mumble_out=true allow_samba_requests_out=true diff --git a/conf/main_ipv6.conf.sample b/conf/main_ipv6.conf.sample index 0d242f3..e14bcbe 100644 --- a/conf/main_ipv6.conf.sample +++ b/conf/main_ipv6.conf.sample @@ -1195,6 +1195,7 @@ allow_irc_request_out=true allow_mysql_request_out=true allow_ipmi_request_out=true allow_remote_console_request_out=true +allow_mumble_out=true allow_samba_requests_out=true diff --git a/ip6t-firewall-gateway b/ip6t-firewall-gateway index 4ccf2a7..9c4720f 100755 --- a/ip6t-firewall-gateway +++ b/ip6t-firewall-gateway @@ -1357,7 +1357,6 @@ if $terminal ; then else echo "Add Rules for Services.." fi -echo -e "\t\033[37m\033[1mAdd Rules for Services..\033[m" # --- @@ -2839,6 +2838,26 @@ else fi +# --- +# - Mumble Service out only +# --- + +echononl "\t\tMumble Service out only" + +if $allow_mumble_request_out ; then + for _dev in ${ext_if_arr[@]} ; do + $ip6t -A OUTPUT -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT + if $kernel_forward_between_interfaces && ! $permit_local_net_to_inet ; then + $ip6t -A FORWARD -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT + fi + done + + echo_done +else + echo_skipped +fi + + # --- # - PGP Keyserver out only # --- diff --git a/ipt-firewall-gateway b/ipt-firewall-gateway index accb30b..10bcf40 100755 --- a/ipt-firewall-gateway +++ b/ipt-firewall-gateway @@ -3548,6 +3548,26 @@ else fi +# --- +# - Mumble Service out only +# --- + +echononl "\t\tMumble Service out only" + +if $allow_mumble_request_out ; then + for _dev in ${ext_if_arr[@]} ; do + $ipt -A OUTPUT -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT + if $kernel_activate_forwarding && ! $permit_local_net_to_inet ; then + $ipt -A FORWARD -o $_dev -p tcp --dport $standard_mumble_port -m conntrack --ctstate NEW -j ACCEPT + fi + done + + echo_done +else + echo_skipped +fi + + # --- # - PGP Keyserver out only # ---