This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree".
The branch, next has been updated via 63f2fb7fda9112d9e39414328e5d4fab28809c63 (commit) from 323923d912cb86fd2e89326aa61bad06bf05d6dd (commit)
Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below.
- Log ----------------------------------------------------------------- commit 63f2fb7fda9112d9e39414328e5d4fab28809c63 Author: Michael Tremer michael.tremer@ipfire.org Date: Wed Mar 5 14:07:23 2014 +0100
firewall: Filter logging of broadcasts from the internal networks.
-----------------------------------------------------------------------
Summary of changes: src/initscripts/init.d/firewall | 14 ++++++++++++++ 1 file changed, 14 insertions(+)
Difference in files: diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall index e87952b..a67af70 100644 --- a/src/initscripts/init.d/firewall +++ b/src/initscripts/init.d/firewall @@ -230,6 +230,20 @@ iptables_init() { iptables -t nat -N REDNAT iptables -t nat -A POSTROUTING -j REDNAT
+ # Filter logging of incoming broadcasts. + iptables -N BROADCAST_FILTER + iptables -A INPUT -j BROADCAST_FILTER + + iptables -A BROADCAST_FILTER -i "${GREEN_DEV}" -d "${GREEN_BROADCAST}" -j DROP + + if [ -n "${BLUE_DEV}" -a -n "${BLUE_BROADCAST}" ]; then + iptables -A BROADCAST_FILTER -i "${BLUE_DEV}" -d "${BLUE_BROADCAST}" -j DROP + fi + + if [ -n "${ORANGE_DEV}" -a -n "${ORANGE_BROADCAST}" ]; then + iptables -A BROADCAST_FILTER -i "${ORANGE_DEV}" -d "${ORANGE_BROADCAST}" -j DROP + fi + # Apply OpenVPN firewall rules /usr/local/bin/openvpnctrl --firewall-rules
hooks/post-receive -- IPFire 2.x development tree