remove namshiel.asininetech.net.rules.*
This commit is contained in:
parent
f5f09ebc58
commit
71fc82ed22
ubuntu/roles/firewall-ruleset-deploy/files
|
@ -1,14 +0,0 @@
|
|||
*filter
|
||||
:INPUT DROP
|
||||
:FORWARD DROP
|
||||
:OUTPUT ACCEPT
|
||||
-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
-A INPUT -p icmp --icmp-type ping -j ACCEPT
|
||||
-A INPUT -p tcp --dport 22 -j ACCEPT
|
||||
-A INPUT -p tcp --dport 5665 -j ACCEPT
|
||||
-A INPUT -p tcp -m multiport --dports 9200,9300 -s 96.126.113.89/32 -j ACCEPT
|
||||
-A INPUT -p tcp -m multiport --dports 9200,9300 -s 10.1.0.0/24 -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 655 -j ACCEPT
|
||||
-A INPUT -p udp -m udp --dport 655 -j ACCEPT
|
||||
COMMIT
|
|
@ -1,20 +0,0 @@
|
|||
*filter
|
||||
:INPUT DROP
|
||||
:FORWARD DROP
|
||||
:OUTPUT ACCEPT
|
||||
:icmp_in -
|
||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A INPUT -i lo -j ACCEPT
|
||||
-A INPUT -p tcp --dport 22 -j ACCEPT
|
||||
-A INPUT -p tcp --dport 5665 -j ACCEPT
|
||||
-A INPUT -p tcp -m multiport --dports 9200,9300 -s 2600:3c00::f03c:91ff:febc:ec5d/128 -j ACCEPT
|
||||
-A INPUT -p ipv6-icmp -j icmp_in
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 128 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 134 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 135 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 136 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 1 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 2 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 3 -j ACCEPT
|
||||
-A icmp_in -p ipv6-icmp -m icmp6 --icmpv6-type 4 -j ACCEPT
|
||||
COMMIT
|
Loading…
Reference in New Issue