brielle
/
Firewall-SOSDG
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

master
bruns@2mbit.com 2010-06-22 05:21:54 +00:00
parent 00b65e8335
commit dee52b3e5e
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
rc.firewall
View File

@ -100,12 +100,22 @@ if [ "$BLOCKTCPPORTS" ] || [ "$BLOCKUDPPORTS" ]; then
for i in $BLOCKTCPPORTS; do for i in $BLOCKTCPPORTS; do
echo -en "\E[35mTCP\E[37m/\E[32m$i " echo -en "\E[35mTCP\E[37m/\E[32m$i "
$IPTABLES -A OUTPUT -p tcp --dport $i --syn -j DROP $IPTABLES -A OUTPUT -p tcp --dport $i --syn -j DROP
if [ "$NATRANGE" ]; then
for i in $NATRANGE; do
$IPTABLES -A PREROUTING -t raw -p tcp -s $i --dport $i --syn -j DROP
done
fi
done done
fi fi
if [ "$BLOCKUDPPORTS" ]; then if [ "$BLOCKUDPPORTS" ]; then
for i in $BLOCKUDPPORTS; do for i in $BLOCKUDPPORTS; do
echo -en "\E[34mUDP\E[37m/\E[32m$i " echo -en "\E[34mUDP\E[37m/\E[32m$i "
$IPTABLES -A OUTPUT -p udp --dport $i -j DROP $IPTABLES -A OUTPUT -p udp --dport $i -j DROP
if [ "$NATRANGE" ]; then
for i in $NATRANGE; do
$IPTABLES -A PREROUTING -t raw -p udp -s $i --dport $i -j DROP
done
fi
done done
fi fi
echo -en "\n" echo -en "\n"