Update tinc-down.tmpl
This commit is contained in:
parent
7c742d4a4e
commit
a5df69d19a
@ -4,3 +4,8 @@
|
|||||||
iptables -D FORWARD -o \$INTERFACE -d ${network_address}/${global_prefix:-16} -j ACCEPT
|
iptables -D FORWARD -o \$INTERFACE -d ${network_address}/${global_prefix:-16} -j ACCEPT
|
||||||
{{ if len "${bgp_routes:-}" }}{{ range "$bgp_routes" | split "," }}iptables -D FORWARD -o ${internal_interface:-eth0} -d {{.}} -j ACCEPT
|
{{ if len "${bgp_routes:-}" }}{{ range "$bgp_routes" | split "," }}iptables -D FORWARD -o ${internal_interface:-eth0} -d {{.}} -j ACCEPT
|
||||||
{{ end }}{{ end }}
|
{{ end }}{{ end }}
|
||||||
|
|
||||||
|
# Prevent spoofing attacks
|
||||||
|
iptables -D FORWARD -i \$INTERFACE -s ! ${network_address}/${global_prefix:-16} -j DROP
|
||||||
|
{{ if len "${bgp_routes:-}" }}{{ range "$bgp_routes" | split "," }}iptables -D FORWARD -i \$INTERFACE -s {{.}} -j DROP
|
||||||
|
{{ end }}{{ end }}
|
Loading…
x
Reference in New Issue
Block a user