crappyrules/mistborn
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

MISTBORN-DOCKER-USER chain

Browse Source
This commit is contained in:
Steven Foerster
2021-02-22 17:07:02 -05:00
parent f8d09291e1
commit 259befc961
1 changed files with 13 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/subinstallers/iptables_docker.sh
+13 -1
View File
@@ -4,5 +4,17 @@ set -e
source ./scripts/subinstallers/vars.sh source ./scripts/subinstallers/vars.sh
# start from scratch
sudo iptables -X MISTBORN-DOCKER-USER 2>/dev/null || true
sudo iptables -N DOCKER-USER || true sudo iptables -N DOCKER-USER || true
sudo iptables -I DOCKER-USER -i $iface -j MISTBORN_INT_LOG_DROP sudo iptables -N MISTBORN-DOCKER-USER || true
# default Mistborn Docker User chain
sudo iptables -A MISTBORN-DOCKER-USER -i $iface -s 10.0.0.0/8 -j RETURN
sudo iptables -A MISTBORN-DOCKER-USER -i $iface -s 172.16.0.0/12 -j RETURN
sudo iptables -A MISTBORN-DOCKER-USER -i $iface -s 192.168.0.0/16 -j RETURN
sudo iptables -A MISTBORN-DOCKER-USER -i $iface -j MISTBORN_INT_LOG_DROP
# add chain to DOCKER-USER
sudo iptables -I DOCKER-USER -j MISTBORN-DOCKER-USER