diff --git a/firewall.rc b/firewall.rc index d349e75..49cde30 100644 --- a/firewall.rc +++ b/firewall.rc @@ -81,13 +81,15 @@ NTPOK='0.0.0.0/0' /sbin/ip6tables -A INPUT -i $INT -p tcp --sport 80 --match state --state ESTABLISHED,RELATED -j ACCEPT /sbin/ip6tables -A INPUT -i $INT -p tcp --sport 443 --match state --state ESTABLISHED,RELATED -j ACCEPT -# Allow DNS and NTP traffic +# Allow DNS, NTP and traceroute traffic /sbin/ip6tables -A OUTPUT -p udp --dport 53 --match state --state NEW -j ACCEPT /sbin/ip6tables -A OUTPUT -p udp --dport 123 --match state --state NEW -j ACCEPT +/sbin/ip6tables -A OUTPUT -p udp --dport 33434:33523 --match state --state NEW -j ACCEPT ################### IPv4 Specific rules # /sbin/iptables ... -# Allow DNS and NTP +# Allow DNS, NTP and traceroute traffic /sbin/iptables -A OUTPUT -p udp --dport 53 --match state --state NEW -j ACCEPT -/sbin/iptables -A OUTPUT -p udp --dport 123 --match state --state NEW -j ACCEPT \ No newline at end of file +/sbin/iptables -A OUTPUT -p udp --dport 123 --match state --state NEW -j ACCEPT +/sbin/iptables -A OUTPUT -p udp --dport 33434:33523 --match state --state NEW -j ACCEPT