paspo/brasatore
1
0
Fork 0
mirror of https://git.libreschool.org/paspo/brasatore.git synced 2024-11-23 06:38:44 +00:00
Code Issues Packages Releases Activity

fix iptables

Browse Source
This commit is contained in:
Paolo Asperti 2023-10-28 00:54:42 +02:00
parent 0c4622974a
commit 887f4bf961
Signed by: paspo
GPG Key ID: 06D46905D19D5182
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
roles/pxeserver/templates/rules.v4
View File

@ -20,7 +20,6 @@
-A INPUT -i {{ lan_iface }} -p tcp -m state --state NEW -m tcp --dport 4047 -j ACCEPT -A INPUT -i {{ lan_iface }} -p tcp -m state --state NEW -m tcp --dport 4047 -j ACCEPT
-A INPUT -i {{ lan_iface }} -p tcp -m state --state NEW -m tcp --dport 4048 -j ACCEPT -A INPUT -i {{ lan_iface }} -p tcp -m state --state NEW -m tcp --dport 4048 -j ACCEPT
-A INPUT -i {{ lan_iface }} -p udp -m state --state NEW -m udp --dport 4048 -j ACCEPT -A INPUT -i {{ lan_iface }} -p udp -m state --state NEW -m udp --dport 4048 -j ACCEPT
-A FORWARD -i {{ lan_iface }} -o {{ lan_iface }} -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT -A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT
-A FORWARD -i {{ lan_iface }} -o {{ lan_iface }} -j REJECT --reject-with icmp-port-unreachable -A FORWARD -i {{ lan_iface }} -o {{ lan_iface }} -j REJECT --reject-with icmp-port-unreachable
-A FORWARD -i {{ lan_iface }} -j ACCEPT -A FORWARD -i {{ lan_iface }} -j ACCEPT