mark
/
firmware
forked from freifunk-franken/firmware
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fff-gateway: Add firewall rules to ensure nothing is forwarded onto WAN 

Signed-off-by: Fabian Bläse <fabian@blaese.de>
Reviewed-by: Christian Dresel <fff@chrisi01.de>
Reviewed-by: Robert Langhammer <rlanghammer@web.de>
This commit is contained in:
Fabian Bläse 2019-09-10 22:09:01 +02:00
parent 6c706432a6
commit d8ea5c652f
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/packages/fff/fff-gateway/files/usr/lib/firewall.d/10-no-forward-wan Normal file
View File

@ -0,0 +1,3 @@
# Ensure nothing is forwarded onto WAN interface
iptables -A FORWARD -o $IF_WAN -j REJECT --reject-with icmp-net-unreachable
ip6tables -A FORWARD -o $IF_WAN -j REJECT --reject-with no-route