converted all ipv6 iptables/ip6tables scenarios

2013-01-17 16:55:03 +01:00
parent a0ffe67fab
commit 5c09942d54
96 changed files with 396 additions and 4619 deletions
@@ -28,6 +28,10 @@
 -A INPUT  -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT
 -A OUTPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT

+# allow crl and certficate fetch from winnetou
+-A INPUT  -i eth0 -p tcp --sport 80 -s fec0::15 -j ACCEPT
+-A OUTPUT -o eth0 -p tcp --dport 80 -d fec0::15 -j ACCEPT
+
 # log dropped packets
 -A INPUT  -j LOG --log-prefix " IN: "
 -A OUTPUT -j LOG --log-prefix " OUT: "
@@ -0,0 +1,12 @@
+*filter
+
+# default policy is DROP
+-P INPUT DROP
+-P OUTPUT DROP
+-P FORWARD DROP
+
+# allow ssh
+-A INPUT  -p tcp --dport 22 -j ACCEPT
+-A OUTPUT -p tcp --sport 22 -j ACCEPT
+
+COMMIT