X-Git-Url: http://git.squeep.com/?p=firewall-squeep;a=blobdiff_plain;f=firewall.sh;h=4106807247651f4dfa3ae9fdbcf3dd93bd4aec66;hp=34184eefcdaa2091b669dcca60a0c6e2cfda0697;hb=cfde4971df11b411615d4e133a372a6d51d7ad97;hpb=0f864e054ebdb2c6606721dc49db867fe93cb61e diff --git a/firewall.sh b/firewall.sh index 34184ee..4106807 100755 --- a/firewall.sh +++ b/firewall.sh @@ -2,9 +2,7 @@ set -e -IPTABLES=$(which iptables) -IP6TABLES=$(which ip6tables) -IPSET=$(which ipset) +. ./common.sh debug=0 @@ -73,8 +71,9 @@ do $IPTABLES -A INPUT -p tcp --tcp-flags ${flags} -j DROP done -$IPSET -exist create allowed_udp bitmap:port range 0-65535 -$IPSET -exist create allowed_tcp bitmap:port range 0-65535 +create_set allowed_udp bitmap:port range 0-65535 +create_set allowed_tcp bitmap:port range 0-65535 + for p in 22 25 53 80 143 443 587 993 1194 5000 5222 5269 22556 64738 do $IPSET -exist add allowed_tcp ${p}