brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

master
bruns@2mbit.com 2010-06-22 04:45:40 +00:00
parent 0d44c065e6
commit d91225a585
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
rc.firewall
View File

@ -52,6 +52,7 @@ if [ "$STRIPECN" ]; then
$IPTABLES -A PREROUTING -t mangle -p tcp -d $i -j ECN \ $IPTABLES -A PREROUTING -t mangle -p tcp -d $i -j ECN \
--ecn-tcp-remove --ecn-tcp-remove
done done
echo -ne "\n"
fi fi
if [ "$CLAMPMSS" ]; then if [ "$CLAMPMSS" ]; then
@ -71,8 +72,8 @@ if [ "$CLAMPMSS" ]; then
$IPTABLES -A INPUT -p icmp --icmp-type fragmentation-needed \ $IPTABLES -A INPUT -p icmp --icmp-type fragmentation-needed \
-i $i -j ACCEPT -i $i -j ACCEPT
done done
fi
echo -en "\n" echo -en "\n"
fi
$IPTABLES -A INPUT -j DROP -p udp --dport domain -m u32 --u32 \ $IPTABLES -A INPUT -j DROP -p udp --dport domain -m u32 --u32 \
"0>>22&0x3C@12>>16=1&&0>>22&0x3C@20>>24=0&&0>>22&0x3C@21=0x00020001" "0>>22&0x3C@12>>16=1&&0>>22&0x3C@20>>24=0&&0>>22&0x3C@21=0x00020001"