[git.ipfire.org] IPFire 2.x development tree branch, next, updated. 63f2fb7fda9112d9e39414328e5d4fab28809c63

[git@ipfire.org]

[-- Attachment #1: Type: text/plain, Size: 1973 bytes --]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "IPFire 2.x development tree".

The branch, next has been updated
       via  63f2fb7fda9112d9e39414328e5d4fab28809c63 (commit)
      from  323923d912cb86fd2e89326aa61bad06bf05d6dd (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 63f2fb7fda9112d9e39414328e5d4fab28809c63
Author: Michael Tremer <michael.tremer(a)ipfire.org>
Date:   Wed Mar 5 14:07:23 2014 +0100

    firewall: Filter logging of broadcasts from the internal networks.

-----------------------------------------------------------------------

Summary of changes:
 src/initscripts/init.d/firewall | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

Difference in files:
diff --git a/src/initscripts/init.d/firewall b/src/initscripts/init.d/firewall
index e87952b..a67af70 100644
--- a/src/initscripts/init.d/firewall
+++ b/src/initscripts/init.d/firewall
@@ -230,6 +230,20 @@ iptables_init() {
 	iptables -t nat -N REDNAT
 	iptables -t nat -A POSTROUTING -j REDNAT
 
+	# Filter logging of incoming broadcasts.
+	iptables -N BROADCAST_FILTER
+	iptables -A INPUT -j BROADCAST_FILTER
+
+	iptables -A BROADCAST_FILTER -i "${GREEN_DEV}" -d "${GREEN_BROADCAST}" -j DROP
+
+	if [ -n "${BLUE_DEV}" -a -n "${BLUE_BROADCAST}" ]; then
+		iptables -A BROADCAST_FILTER -i "${BLUE_DEV}" -d "${BLUE_BROADCAST}" -j DROP
+	fi
+
+	if [ -n "${ORANGE_DEV}" -a -n "${ORANGE_BROADCAST}" ]; then
+		iptables -A BROADCAST_FILTER -i "${ORANGE_DEV}" -d "${ORANGE_BROADCAST}" -j DROP
+	fi
+
 	# Apply OpenVPN firewall rules
 	/usr/local/bin/openvpnctrl --firewall-rules
 


hooks/post-receive
--
IPFire 2.x development tree