create xenophobe chain in main firewall script

[firewall-squeep] / firewall.sh

diff --git a/firewall.sh b/firewall.sh
index f880eafad6986950ea39bb344663ab4d74fbd70a..356075c424f98eb5d40a071a543455ba17a018a1 100755 (executable)
--- a/firewall.sh
+++ b/firewall.sh
@@ -91,6 +91,8 @@ $IPTABLES -A INPUT -i "${EXT_IF}" -p udp -m set --match-set allowed_udp dst -j A
 $IP6TABLES -A INPUT -i "${EXT_IF}" -p tcp -m set --match-set allowed_tcp dst -j ACCEPT
 $IP6TABLES -A INPUT -i "${EXT_IF}" -p udp -m set --match-set allowed_udp dst -j ACCEPT
 
+create_drop_chain xenophobe
+
 # insert asia blocker
 ./sinokorea.sh