crappyrules/mistborn
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Merge branch 'output_chain' into 'master'

Browse Source 
iptables output chain

See merge request cyber5k/mistborn!7
This commit is contained in:
Steven Foerster
2020-03-19 13:36:02 +00:00
parent fe814a2648 dd47a41ad7
commit d9d9cc3631
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/subinstallers/iptables.sh
+3
View File
@@ -22,6 +22,7 @@ sudo iptables -t nat -F
sudo iptables -X MISTBORN_LOG_DROP 2>/dev/null || true sudo iptables -X MISTBORN_LOG_DROP 2>/dev/null || true
sudo iptables -X MISTBORN_WIREGUARD_INPUT 2>/dev/null || true sudo iptables -X MISTBORN_WIREGUARD_INPUT 2>/dev/null || true
sudo iptables -X MISTBORN_WIREGUARD_FORWARD 2>/dev/null || true sudo iptables -X MISTBORN_WIREGUARD_FORWARD 2>/dev/null || true
sudo iptables -X MISTBORN_DOCKER_OUTPUT 2>/dev/null || true
sudo iptables -X MISTBORN_DOCKER_INPUT 2>/dev/null || true sudo iptables -X MISTBORN_DOCKER_INPUT 2>/dev/null || true
# iptables: log and drop chain # iptables: log and drop chain
@@ -32,6 +33,7 @@ sudo iptables -A MISTBORN_LOG_DROP -j DROP
# wireguard rules chains # wireguard rules chains
sudo iptables -N MISTBORN_WIREGUARD_INPUT sudo iptables -N MISTBORN_WIREGUARD_INPUT
sudo iptables -N MISTBORN_WIREGUARD_FORWARD sudo iptables -N MISTBORN_WIREGUARD_FORWARD
sudo iptables -N MISTBORN_WIREGUARD_OUTPUT
# iptables # iptables
echo "Setting iptables rules" echo "Setting iptables rules"
@@ -55,6 +57,7 @@ sudo iptables -A INPUT -j MISTBORN_DOCKER_INPUT
sudo iptables -A INPUT -j MISTBORN_WIREGUARD_INPUT sudo iptables -A INPUT -j MISTBORN_WIREGUARD_INPUT
sudo iptables -A INPUT -j MISTBORN_LOG_DROP sudo iptables -A INPUT -j MISTBORN_LOG_DROP
sudo iptables -A FORWARD -j MISTBORN_WIREGUARD_FORWARD sudo iptables -A FORWARD -j MISTBORN_WIREGUARD_FORWARD
sudo iptables -A OUTPUT -j MISTBORN_WIREGUARD_OUTPUT
sudo iptables -P INPUT DROP sudo iptables -P INPUT DROP
sudo iptables -P FORWARD DROP sudo iptables -P FORWARD DROP