Mirrors/spark
1
0
Fork 0
mirror of https://github.com/pigmonkey/spark.git synced 2026-01-23 02:24:09 +00:00
Code Issues Projects Releases Wiki Activity

re-order iptables rules

Browse source
This commit is contained in:
Pig Monkey 2022-10-14 17:28:40 -07:00
parent 8a14ae5474
commit c7730a1754
2 changed files with 13 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

16
roles/iptables/templates/ip6tables.rules.j2
View file

@ -18,18 +18,18 @@ COMMIT
-A INPUT -p ipv6-icmp --icmpv6-type 128 -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -p udp -m conntrack --ctstate NEW -j UDP
-A INPUT -p tcp -m tcp --tcp-flags FIN,SYN,RST,ACK SYN -m conntrack --ctstate NEW -j TCP
{% if kdeconnect.open_ports is defined and kdeconnect.open_ports == True %}
-A INPUT -p tcp -m tcp --dport 1714:1764 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -p udp -m udp --dport 1714:1764 -m state --state NEW,ESTABLISHED -j ACCEPT
{% endif %}
{% if syncthing.open_ports is defined and syncthing.open_ports == True %}
-A INPUT -p tcp -m tcp --dport 22000 -j ACCEPT
-A INPUT -p udp -m udp --dport 21027 -j ACCEPT
{% endif %}
-A INPUT -p udp -j REJECT --reject-with icmp6-adm-prohibited
-A INPUT -p tcp -j REJECT --reject-with tcp-reset
-A INPUT -j REJECT --reject-with icmp6-adm-prohibited
{% if ssh.enable_sshd %}
-A TCP -p tcp -m tcp --dport {{ ssh.port }} -j ACCEPT
{% endif %}
{% if syncthing.open_ports is defined and syncthing.open_ports == True %}
-A INPUT -p tcp -m tcp --dport 22000 -j ACCEPT
-A INPUT -p udp -m udp --dport 21027 -j ACCEPT
{% endif %}
{% if kdeconnect.open_ports is defined and kdeconnect.open_ports == True %}
-A INPUT -p tcp -m tcp --dport 1714:1764 -j ACCEPT
-A INPUT -p udp -m udp --dport 1714:1764 -j ACCEPT
{% endif %}
COMMIT

10
roles/iptables/templates/iptables.rules.j2
View file

@ -15,15 +15,15 @@
-A INPUT -p tcp -m tcp --dport 1714:1764 -m state --state NEW,ESTABLISHED -j ACCEPT
-A INPUT -p udp -m udp --dport 1714:1764 -m state --state NEW,ESTABLISHED -j ACCEPT
{% endif %}
{% if syncthing.open_ports is defined and syncthing.open_ports == True %}
-A INPUT -p tcp -m tcp --dport 22000 -j ACCEPT
-A INPUT -p udp -m udp --dport 22000 -j ACCEPT
-A INPUT -p udp -m udp --dport 21027 -j ACCEPT
{% endif %}
-A INPUT -p udp -j REJECT --reject-with icmp-port-unreachable
-A INPUT -p tcp -j REJECT --reject-with tcp-reset
-A INPUT -j REJECT --reject-with icmp-proto-unreachable
{% if ssh.enable_sshd %}
-A TCP -p tcp -m tcp --dport {{ ssh.port }} -j ACCEPT
{% endif %}
{% if syncthing.open_ports is defined and syncthing.open_ports == True %}
-A INPUT -p tcp -m tcp --dport 22000 -j ACCEPT
-A INPUT -p udp -m udp --dport 22000 -j ACCEPT
-A INPUT -p udp -m udp --dport 21027 -j ACCEPT
{% endif %}
COMMIT