mirror of
https://gitlab.com/shorewall/code.git
synced 2024-12-16 03:10:39 +01:00
Improve REJECT processing
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@537 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
parent
16906234c8
commit
d44564fab8
@ -3302,8 +3302,12 @@ add_common_rules() {
|
||||
#
|
||||
# Reject Rules
|
||||
#
|
||||
run_iptables -A reject -p tcp -j REJECT --reject-with tcp-reset
|
||||
run_iptables -A reject -j REJECT
|
||||
run_iptables -A reject -p tcp -j REJECT --reject-with tcp-reset
|
||||
run_iptables -A reject -p udp -j REJECT
|
||||
qt iptables -A reject -p icmp -j REJECT --reject-with icmp-host-unreachable
|
||||
qt iptables -A reject -j REJECT --reject-with icmp-host-prohibited
|
||||
run_iptables -A reject -j REJECT
|
||||
|
||||
#
|
||||
# dropunclean rules
|
||||
#
|
||||
|
Loading…
Reference in New Issue
Block a user