firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Some more or less minor changes..

Browse Source
This commit is contained in:
Christoph 2020-10-30 15:00:46 +01:00
parent 35d3ffeded
commit e1047e9c47
2 changed files with 12 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
ip6t-firewall-server
View File

@ -311,14 +311,12 @@ echononl "\tPass through Devices (not firewalled)"
if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then
for _dev in ${unprotected_if_arr[@]} ; do for _dev in ${unprotected_if_arr[@]} ; do
if $log_unprotected || $log_all ; then if $log_unprotected || $log_all ; then
$ip6t -A INPUT -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " $ip6t -t mangle -A PREROUTING -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
$ip6t -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " $ip6t -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
$ip6t -A FORWARD -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
$ip6t -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " $ip6t -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
fi fi
$ip6t -A INPUT -i $_dev -j ACCEPT $ip6t -t mangle -A PREROUTING -i $_dev -j ACCEPT
$ip6t -A OUTPUT -o $_dev -j ACCEPT $ip6t -A OUTPUT -o $_dev -j ACCEPT
$ip6t -A FORWARD -i $_dev -j ACCEPT
$ip6t -A FORWARD -o $_dev -j ACCEPT $ip6t -A FORWARD -o $_dev -j ACCEPT
done done
echo_done echo_done
@ -334,6 +332,10 @@ fi
echononl "\tAllow forwarding (private) IPs / IP-Ranges.." echononl "\tAllow forwarding (private) IPs / IP-Ranges.."
if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then
for _ip in ${forward_private_ip_arr[@]}; do for _ip in ${forward_private_ip_arr[@]}; do
if $log_forwarding_priv_ip || $log_all ; then
$ip6t -t mangle -A PREROUTING -d $_ip -j $LOG_TARGET $tag_log_prefix "$log_prefix Accept priv ip $_ip: "
$ip6t -t mangle -A PREROUTING-s $_ip -j $LOG_TARGET $tag_log_prefix "$log_prefix Accept priv ip $_ip: "
fi
$ip6t -t mangle -A PREROUTING -d $_ip -j ACCEPT $ip6t -t mangle -A PREROUTING -d $_ip -j ACCEPT
$ip6t -t mangle -A PREROUTING-s $_ip -j ACCEPT $ip6t -t mangle -A PREROUTING-s $_ip -j ACCEPT
done done

10
ipt-firewall-server
View File

@ -371,14 +371,12 @@ echononl "\tPass through Devices (not firewalled)"
if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then
for _dev in ${unprotected_if_arr[@]} ; do for _dev in ${unprotected_if_arr[@]} ; do
if $log_unprotected || $log_all ; then if $log_unprotected || $log_all ; then
$ipt -A INPUT -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:" $ipt -t mangle -A PREROUTING -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
$ipt -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:" $ipt -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
$ipt -A FORWARD -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
$ipt -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:" $ipt -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
fi fi
$ipt -A INPUT -i $_dev -j ACCEPT $ipt -t mangle -A PREROUTING -i $_dev -j ACCEPT
$ipt -A OUTPUT -o $_dev -j ACCEPT $ipt -A OUTPUT -o $_dev -j ACCEPT
$ipt -A FORWARD -i $_dev -j ACCEPT
$ipt -A FORWARD -o $_dev -j ACCEPT $ipt -A FORWARD -o $_dev -j ACCEPT
done done
echo_done echo_done
@ -394,6 +392,10 @@ fi
echononl "\tAllow forwarding (private) IPs / IP-Ranges.." echononl "\tAllow forwarding (private) IPs / IP-Ranges.."
if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then if [[ ${#forward_private_ip_arr[@]} -gt 0 ]] ; then
for _ip in ${forward_private_ip_arr[@]}; do for _ip in ${forward_private_ip_arr[@]}; do
if $log_forwarding_priv_ip || $log_all ; then
$ipt -t mangle -A PREROUTING -d $_ip -j $LOG_TARGET $tag_log_prefix "$log_prefix Accept priv ip $_ip: "
$ipt -t mangle -A PREROUTING -s $_ip -j $LOG_TARGET $tag_log_prefix "$log_prefix Accept priv ip $_ip: "
fi
$ipt -t mangle -A PREROUTING -d $_ip -j ACCEPT $ipt -t mangle -A PREROUTING -d $_ip -j ACCEPT
$ipt -t mangle -A PREROUTING -s $_ip -j ACCEPT $ipt -t mangle -A PREROUTING -s $_ip -j ACCEPT
done done