瀏覽代碼

Mesh firewalls

Bob Mottram 9 年之前
父節點
當前提交
a31acc3353
共有 1 個文件被更改,包括 7 次插入5 次删除
  1. 7
    5
      src/freedombone

+ 7
- 5
src/freedombone 查看文件

@@ -5824,7 +5824,9 @@ function configure_firewall_for_batman {
5824 5824
   fi
5825 5825
   # DHCP
5826 5826
   iptables -A INPUT -i eth0 -p udp --dport 547 -j ACCEPT
5827
-  iptables -A INPUT -i wlan0 -p udp --dport 5353 -j ACCEPT
5827
+  iptables -A INPUT -i wlan0 -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
5828
+  ip6tables -A INPUT -i wlan0 -p udp --dport 5353 -j ACCEPT
5829
+
5828 5830
   save_firewall_settings
5829 5831
   echo 'configure_firewall_for_batman' >> $COMPLETION_FILE
5830 5832
 }
@@ -5837,7 +5839,7 @@ function configure_firewall_for_babel {
5837 5839
       return
5838 5840
   fi
5839 5841
   iptables -A INPUT -i wlan0 -p udp --dport $BABEL_PORT -j ACCEPT
5840
-  iptables -A INPUT -i wlan0 -p udp --dport 5353 -j ACCEPT
5842
+  iptables -A INPUT -i wlan0 -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
5841 5843
   save_firewall_settings
5842 5844
   echo 'configure_firewall_for_babel' >> $COMPLETION_FILE
5843 5845
 }
@@ -10115,9 +10117,6 @@ configure_firewall_for_ssh
10115 10117
 configure_firewall_for_dns
10116 10118
 configure_firewall_for_ftp
10117 10119
 configure_firewall_for_web_access
10118
-configure_firewall_for_cjdns
10119
-configure_firewall_for_batman
10120
-configure_firewall_for_babel
10121 10120
 configure_firewall_for_voip
10122 10121
 remove_proprietary_repos
10123 10122
 change_debian_repos
@@ -10145,9 +10144,12 @@ regenerate_ssh_keys
10145 10144
 create_upgrade_script
10146 10145
 configure_avahi
10147 10146
 install_atheros_wifi
10147
+configure_firewall_for_cjdns
10148 10148
 mesh_cjdns
10149 10149
 mesh_cjdns_tools
10150
+configure_firewall_for_batman
10150 10151
 mesh_batman_bridge
10152
+configure_firewall_for_babel
10151 10153
 mesh_babel
10152 10154
 route_outgoing_traffic_through_tor
10153 10155
 install_watchdog_script