WEBDIENSTE/algo
1
0
Fork 0
mirror of https://github.com/trailofbits/algo.git synced 2026-09-29 13:05:05 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fixed #146

Browse Source
This commit is contained in:
Jack Ivanov
2016-12-17 16:36:59 +03:00
parent 6d166fe7cc
commit 2c9c3ccb09
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
roles/vpn/templates/rules.v4.j2
+1
View File
@@ -15,6 +15,7 @@ COMMIT
-A INPUT -p icmp --icmp-type echo-request -m hashlimit --hashlimit-upto 5/s --hashlimit-mode srcip --hashlimit-srcmask 32 --hashlimit-name icmp-echo-drop -j DROP
-A INPUT -p udp -m multiport --dports 500,4500 -j ACCEPT
-A INPUT -p tcp --dport 22 -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -p ipencap -m policy --dir in --pol ipsec --proto esp -j ACCEPT
# TODO:
# The IP of the resolver should be bound to a DUMMY interface.
# DUMMY interfaces are the proper way to install IPs without assigning them any