firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add support for dhclient.

Browse Source
This commit is contained in:
Christoph
2021-01-11 19:59:08 +01:00
parent e68705c819
commit 5ec7c9bcea
5 changed files with 57 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
ip6t-firewall-server
View File

@ -1112,14 +1112,28 @@ echo
# - DHCP
# ---
echononl "\t\tDHCP"
echononl "\t\tDHCP Clients"
if [[ ${#dhcp_if_arr[@]} -gt 0 ]] ; then
if [[ ${#dhcp_client_if_arr[@]} -gt 0 ]] ; then
for _dev in ${dhcp_if_arr[@]} ; do
# - in
$ip6t -A INPUT -p udp -i $_dev -s 0/0 --sport 68 -d 255.255.255.255 --dport 67 -j ACCEPT
# - out
$ip6t -A OUTPUT -p udp -o $_dev --sport 67 -d 0/0 --dport 68 -j ACCEPT
$ip6t -A OUTPUT -p udp -o $_dev --dport 67 -d ::/0 --sport 1024:65535 -j ACCEPT
# - in
$ipt -A INPUT -p udp -i $_dev --sport 67 -d ::/0 --dport 68 -j ACCEPT
done
echo_done
else
echo_skipped
fi
echononl "\t\tDHCP Server"
if [[ ${#dhcp_server_if_arr[@]} -gt 0 ]] ; then
for _dev in ${dhcp_server_if_arr[@]} ; do
# - in
$ip6t -A INPUT -p udp -i $_dev -s ::/0 --sport 68 --dport 67 -j ACCEPT
# - out
$ip6t -A OUTPUT -p udp -o $_dev --sport 67 -d ::/0 --dport 68 -j ACCEPT
done
echo_done
else