diff --git a/include/README b/include/README new file mode 100644 index 0000000..0c2f5ad --- /dev/null +++ b/include/README @@ -0,0 +1,7 @@ +In this directory, you can create the following filenames to add +custom rules at each section of the firewall script: + +ipv4_custom_allowedports ipv4_custom_mssclamp ipv4_custom_proto +ipv4_custom_blockincoming ipv4_custom_nat ipv4_custom_routing +ipv4_custom_blockports ipv4_custom_notrack +ipv4_custom_conntrack ipv4_custom_portforward diff --git a/include/ipv4_custom_allowedports b/include/ipv4_custom_allowedports deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_blockincoming b/include/ipv4_custom_blockincoming deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_blockports b/include/ipv4_custom_blockports deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_conntrack b/include/ipv4_custom_conntrack deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_mssclamp b/include/ipv4_custom_mssclamp deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_nat b/include/ipv4_custom_nat deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_notrack b/include/ipv4_custom_notrack deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_portforward b/include/ipv4_custom_portforward deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_proto b/include/ipv4_custom_proto deleted file mode 100644 index e69de29..0000000 diff --git a/include/ipv4_custom_routing b/include/ipv4_custom_routing deleted file mode 100644 index e69de29..0000000 diff --git a/rc.firewall b/rc.firewall index 3abf071..d4c36da 100755 --- a/rc.firewall +++ b/rc.firewall @@ -64,7 +64,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_mssclamp" ]; then echo -e "\E[33mLoading custom MSS Clamp rules...\E[37m" . "$BASEDIR/include/ipv4_custom_mssclamp" - echo -ne "\n" fi if [ "$CLAMPMSS" ]; then @@ -93,7 +92,6 @@ $IPTABLES -A INPUT -j DROP -p udp --dport domain -m u32 --u32 \ if [ -s "$BASEDIR/include/ipv4_custom_conntrack" ]; then echo -e "\E[33mLoading custom conntrack rules...\E[37m" . "$BASEDIR/include/ipv4_custom_conntrack" - echo -ne "\n" fi if [ $CONNTRACK ]; then @@ -111,7 +109,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_blockports" ]; then echo -e "\E[33mLoading custom blocked port rules...\E[37m" . "$BASEDIR/include/ipv4_custom_blockports" - echo -ne "\n" fi if [ "$BLOCKTCPPORTS" ] || [ "$BLOCKUDPPORTS" ]; then @@ -145,7 +142,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_allowedports" ]; then echo -e "\E[33mLoading custom allowed port rules...\E[37m" . "$BASEDIR/include/ipv4_custom_allowedports" - echo -ne "\n" fi if [ "$TCPPORTS" ] || [ "$UDPPORTS" ]; then @@ -174,7 +170,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_proto" ]; then echo -e "\E[33mLoading custom protocol rules...\E[37m" . "$BASEDIR/include/ipv4_custom_proto" - echo -ne "\n" fi if [ "$ALLOWEDPROTO" ]; then @@ -191,7 +186,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_notrack" ]; then echo -e "\E[33mLoading custom NOTRACK rules...\E[37m" . "$BASEDIR/include/ipv4_custom_notrack" - echo -ne "\n" fi if [ $CONNTRACK ]; then @@ -207,7 +201,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_routing" ]; then echo -e "\E[33mLoading custom routing rules...\E[37m" . "$BASEDIR/include/ipv4_custom_routing" - echo -ne "\n" fi if [ $ROUTING ]; then @@ -242,7 +235,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_portforward" ]; then echo -e "\E[33mLoading custom port forwarding rules...\E[37m" . "$BASEDIR/include/ipv4_custom_portforward" - echo -ne "\n" fi if [ $PORTFW ] && [ $NAT ]; then @@ -267,7 +259,6 @@ fi if [ -s "$BASEDIR/include/ipv4_custom_nat" ]; then echo -e "\E[33mLoading custom nat rules...\E[37m" . "$BASEDIR/include/ipv4_custom_nat" - echo -ne "\n" fi if [ $NAT ]; then @@ -289,7 +280,6 @@ $IPTABLES --policy FORWARD DROP if [ -s "$BASEDIR/include/ipv4_custom_blockincoming" ]; then echo -e "\E[33mLoading custom incoming blocked rules...\E[37m" . "$BASEDIR/include/ipv4_custom_blockincoming" - echo -ne "\n" fi if [ $BLOCKINCOMING ]; then