forked from freifunk-franken/firmware
Revert "ssh reopened in firewall config for debugging purposes, should be closed again in stable release"
This isn't really needed for debugging. The default port number 22 is often
targeted for brute-force attacks. Dropbear on 16M memory isn't relly capable
of handling this.
This reverts commit 2083df18d1
.
This commit is contained in:
parent
1f7875f62a
commit
0dd637d097
|
@ -7,7 +7,5 @@ iptables -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-
|
|||
# Das wirkt bei kleinen Geräten wir ein DOS
|
||||
WAN=$(uci get network.wan.ifname)
|
||||
iptables -A INPUT -i $WAN -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
#ssh open for debugging purposes, should be removed in stable release
|
||||
iptables -A INPUT -i $WAN -p tcp --dport 22 -j ACCEPT
|
||||
iptables -A INPUT -i $WAN -j REJECT
|
||||
|
||||
|
|
Loading…
Reference in New Issue