firewall/ipt-server
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix error for not firewalled interfaces.

Browse Source
This commit is contained in:
Christoph 2024-12-24 17:16:35 +01:00
parent e7311a3963
commit f0e15b992b
4 changed files with 6 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
conf/main_ipv4.conf.sample
View File

@ -40,7 +40,7 @@ drop_icmp=false
# --- Allow all outgoing traffic # --- Allow all outgoing traffic
# ------------- # -------------
# - unprotected_ifs # - allow_all_outgoing_traffic
# - # -
# - Posiible values are 'true' and 'false' # - Posiible values are 'true' and 'false'
# - # -

2
conf/main_ipv6.conf.sample
View File

@ -40,7 +40,7 @@ drop_icmp=false
# --- Allow all outgoing traffic # --- Allow all outgoing traffic
# ------------- # -------------
# - unprotected_ifs # - allow_all_outgoing_traffic
# - # -
# - Posiible values are 'true' and 'false' # - Posiible values are 'true' and 'false'
# - # -

2
ip6t-firewall-server
View File

@ -372,10 +372,12 @@ if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then
if $log_unprotected || $log_all ; then if $log_unprotected || $log_all ; then
$ip6t -t mangle -A PREROUTING -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " $ip6t -t mangle -A PREROUTING -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
$ip6t -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " $ip6t -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
$ip6t -A INPUT -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
$ip6t -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: " $ip6t -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}: "
fi fi
$ip6t -t mangle -A PREROUTING -i $_dev -j ACCEPT $ip6t -t mangle -A PREROUTING -i $_dev -j ACCEPT
$ip6t -A OUTPUT -o $_dev -j ACCEPT $ip6t -A OUTPUT -o $_dev -j ACCEPT
$ip6t -A INPUT -i $_dev -j ACCEPT
$ip6t -A FORWARD -o $_dev -j ACCEPT $ip6t -A FORWARD -o $_dev -j ACCEPT
done done
echo_done echo_done

8
ipt-firewall-server
View File

@ -432,10 +432,12 @@ if [[ ${#unprotected_if_arr[@]} -gt 0 ]]; then
if $log_unprotected || $log_all ; then if $log_unprotected || $log_all ; then
$ipt -t mangle -A PREROUTING -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:" $ipt -t mangle -A PREROUTING -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
$ipt -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:" $ipt -A OUTPUT -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
$ipt -A INPUT -i $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
$ipt -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:" $ipt -A FORWARD -o $_dev -j $LOG_TARGET $tag_log_prefix "$log_prefix Not firewalled ${_dev}:"
fi fi
$ipt -t mangle -A PREROUTING -i $_dev -j ACCEPT $ipt -t mangle -A PREROUTING -i $_dev -j ACCEPT
$ipt -A OUTPUT -o $_dev -j ACCEPT $ipt -A OUTPUT -o $_dev -j ACCEPT
$ipt -A INPUT -i $_dev -j ACCEPT
$ipt -A FORWARD -o $_dev -j ACCEPT $ipt -A FORWARD -o $_dev -j ACCEPT
done done
echo_done echo_done
@ -1267,12 +1269,6 @@ else
echo_skipped echo_skipped
fi fi
# - unprotected_ifs
# -
# - Posiible values are 'true' and 'false'
# -
allow_all_outgoing_traffic=false
# --- # ---
# - Don't allow traffic into private networks # - Don't allow traffic into private networks