Add default rule for IPv6 DNS responses

This commit is contained in:
Gregory Colpart 2015-03-13 01:55:13 +01:00
parent 283ff1161f
commit 6bc560b66a
1 changed files with 1 additions and 0 deletions

View File

@ -81,6 +81,7 @@ NTPOK='0.0.0.0/0'
/sbin/ip6tables -A INPUT -i $INT -p tcp --sport 80 --match state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip6tables -A INPUT -i $INT -p tcp --sport 443 --match state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip6tables -A INPUT -i $INT -p tcp --sport 25 --match state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip6tables -A INPUT -i $INT -p udp --sport 53 --match state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip6tables -A INPUT -i $INT -p tcp --sport 53 --match state --state ESTABLISHED,RELATED -j ACCEPT
# Allow Output DNS, NTP and traceroute traffic