* [PATCH] suricata: Scan outgoing traffic, too
@ 2019-01-29 12:03 Michael Tremer
2019-01-29 13:09 ` Stefan Schantl
0 siblings, 1 reply; 2+ messages in thread
From: Michael Tremer @ 2019-01-29 12:03 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 615 bytes --]
Connections from the firewall and through the proxy must be filtered, too
Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
---
src/initscripts/system/firewall | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall
index 9a79cb1..a4fcee2 100644
--- a/src/initscripts/system/firewall
+++ b/src/initscripts/system/firewall
@@ -189,6 +189,7 @@ iptables_init() {
iptables -N IPS
iptables -A INPUT -j IPS
iptables -A FORWARD -j IPS
+ iptables -A OUTPUT -j IPS
# Block non-established IPsec networks
iptables -N IPSECBLOCK
--
2.6.3
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [PATCH] suricata: Scan outgoing traffic, too
2019-01-29 12:03 [PATCH] suricata: Scan outgoing traffic, too Michael Tremer
@ 2019-01-29 13:09 ` Stefan Schantl
0 siblings, 0 replies; 2+ messages in thread
From: Stefan Schantl @ 2019-01-29 13:09 UTC (permalink / raw)
To: development
[-- Attachment #1: Type: text/plain, Size: 717 bytes --]
Hello Michael,
thanks for the patch - merged!
Best regards,
-Stefan
> Connections from the firewall and through the proxy must be filtered,
> too
>
> Signed-off-by: Michael Tremer <michael.tremer(a)ipfire.org>
> ---
> src/initscripts/system/firewall | 1 +
> 1 file changed, 1 insertion(+)
>
> diff --git a/src/initscripts/system/firewall
> b/src/initscripts/system/firewall
> index 9a79cb1..a4fcee2 100644
> --- a/src/initscripts/system/firewall
> +++ b/src/initscripts/system/firewall
> @@ -189,6 +189,7 @@ iptables_init() {
> iptables -N IPS
> iptables -A INPUT -j IPS
> iptables -A FORWARD -j IPS
> + iptables -A OUTPUT -j IPS
>
> # Block non-established IPsec networks
> iptables -N IPSECBLOCK
[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2019-01-29 13:09 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-01-29 12:03 [PATCH] suricata: Scan outgoing traffic, too Michael Tremer
2019-01-29 13:09 ` Stefan Schantl
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox