diff options
| author | Guilhem Moulin <guilhem@fripost.org> | 2013-11-03 03:24:32 +0100 |
|---|---|---|
| committer | Guilhem Moulin <guilhem@fripost.org> | 2015-06-07 02:50:34 +0200 |
| commit | 6c30a3f5a131b6e628b588c0723d5e5374e115e1 (patch) | |
| tree | e27930281e293043d2691d9dd36d1c7bb24f4e77 /roles/common/files/etc/network | |
| parent | d4c07ed2674cc3c46e3940129a476f50e1931a2a (diff) | |
Major refactoring of the firewall.
Also, added some options:
-f force: no confirmation asked
-c check: check (dry-run) mode
-v verbose: see the difference between old and new ruleset
-4 IPv4 only
-6 IPv6 only
Diffstat (limited to 'roles/common/files/etc/network')
| -rwxr-xr-x | roles/common/files/etc/network/if-pre-up.d/iptables | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/roles/common/files/etc/network/if-pre-up.d/iptables b/roles/common/files/etc/network/if-pre-up.d/iptables index 6a50948..514f774 100755 --- a/roles/common/files/etc/network/if-pre-up.d/iptables +++ b/roles/common/files/etc/network/if-pre-up.d/iptables @@ -1,5 +1,5 @@ #!/bin/bash -# +# # A pre-up hook to auto-(re)load the iptables rulesets whenever the # network is brought up. If the action fails, an alert message is passed # to syslogd. @@ -16,7 +16,7 @@ PATH=/usr/sbin:/usr/bin:/sbin:/bin # won't be logged at boot time. log="/usr/bin/logger -st firewall" -# Ignore the loopback interface; run the strip for ifup only. +# Ignore the loopback interface; run the script for ifup only. [ "$IFACE" != lo -a "$MODE" = start ] || exit 0 # We support only IPv4 and IPv6. |