evolix/minifirewall
21
0
Fork 0
Code Issues 4 Pull requests 3 Releases 1 Activity

Add a set for the blocked IP addresses

Browse source
This commit is contained in:
Tristan PILAT 2020-10-14 17:14:23 +02:00
parent 5af8fad976
commit 6a46ca716b
1 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
minifirewall-start.sh
View file

@ -93,6 +93,8 @@ $NFT add element inet minifirewall minifirewall_trusted_ips {$(echo $TRUSTEDIPS
$NFT add set inet minifirewall minifirewall_privileged_ips { type ipv4_addr\;}
$NFT add element inet minifirewall minifirewall_privileged_ips {$(echo $PRIVILEGIEDIPS | sed 's/ /, /g')}
# Add set for blocked IP addresses
$NFT add set inet minifirewall minifirewall_blocked_ips '{ type ipv4_addr ; flags interval ;}'
# Add TCP/UDP chains for protected, public, semi-public and private ports
$NFT add chain inet minifirewall protected_tcp_ports
$NFT add chain inet minifirewall protected_udp_ports