should be src for ipset based rule
This commit is contained in:
parent
c267ec243f
commit
92f286bbd6
@ -4,7 +4,7 @@
|
|||||||
:INPUT DROP
|
:INPUT DROP
|
||||||
:FORWARD DROP
|
:FORWARD DROP
|
||||||
:OUTPUT DROP
|
:OUTPUT DROP
|
||||||
-A INPUT -m set --match-set nasties -j DROP
|
-A INPUT -m set --match-set nasties src -j DROP
|
||||||
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||||
-A INPUT -i lo -j ACCEPT
|
-A INPUT -i lo -j ACCEPT
|
||||||
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
|
-A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
|
||||||
|
Loading…
Reference in New Issue
Block a user