lib/shutter/content.rb in shutter-0.0.6 vs lib/shutter/content.rb in shutter-0.0.7

- old
+ new

@@ -138,15 +138,30 @@ -A DropDDOS ! -d 0.0.0.255/0.0.0.255 -m limit --limit 3/min -j LOG --log-prefix "iptables: DDOS detected:" -A DropDDOS -j DROP ################################################################## +# NATing +################################################################## +# [RULES:FORWARD] +-A FORWARD ! -d 0.0.0.255/0.0.0.255 -m limit --limit 3/min -j LOG --log-prefix "iptables: Unauthorized Forward:" +-A FORWARD -j DROP + +################################################################## # Add any additional rules that fail2ban has added ################################################################## # [RULES:FAIL2BAN] COMMIT + +*nat +:PREROUTING ACCEPT [0:0] +:POSTROUTING ACCEPT [0:0] +:OUTPUT ACCEPT [0:0] +# [RULES:POSTROUTING] +COMMIT + } IFACE_DMZ = %q{# Generated by Shutter # iface # eth0 @@ -172,7 +187,12 @@ } PORTS_PRIVATE = %q{ # proto port 22 tcp +} + +IFACE_FORWARD = %q{ +# src iface | dst iface +# eth0 eth1 } end \ No newline at end of file