Add: Allow all traffic from local ip to the internet
This commit is contained in:
@ -916,6 +916,34 @@ fi
|
||||
|
||||
|
||||
|
||||
# ---
|
||||
# - Allow all traffic from local ip to the internet
|
||||
# ---
|
||||
|
||||
echononl "\tAllow all traffic from local ip to the internet"
|
||||
|
||||
if [[ ${#allow_local_ip_to_inet_arr[@]} -gt 0 ]] \
|
||||
&& $kernel_forward_between_interfaces ; then
|
||||
|
||||
for _ip in ${allow_local_ip_to_inet_arr[@]} ; do
|
||||
$ip6t -A FORWARD -p ALL -s $_ip -m conntrack --ctstate NEW -j ACCEPT
|
||||
|
||||
# - Note:
|
||||
# - If (local) alias interfaces like eth1:0 in use, youe need a further
|
||||
# - special rule.
|
||||
# -
|
||||
if $local_alias_interfaces ; then
|
||||
$ip6t -A FORWARD -p tcp -d $_ip --tcp-flag ACK ACK -j ACCEPT
|
||||
$ip6t -A FORWARD -p tcp -s $_ip --tcp-flag ACK ACK -j ACCEPT
|
||||
fi
|
||||
done
|
||||
echo_done
|
||||
else
|
||||
echo_skipped
|
||||
fi
|
||||
|
||||
|
||||
|
||||
# ---
|
||||
# - Allow local services from given local networks
|
||||
# ---
|
||||
|
Reference in New Issue
Block a user