danwin1210/hosting
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Adapt firewall rule to new ftp ports

Browse Source
This commit is contained in:
Daniel Winzen
2018-05-06 09:57:24 +02:00
parent c6498ea1dc
commit 1a9ee646c6
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
etc/rc.local
View File

@ -39,7 +39,7 @@ iptables -A OUTPUT -p udp --dport 123 -d $clearnet -j ACCEPT
)done )done
#restrict local communication for php and webserver #restrict local communication for php and webserver
#allowed tcp ports #allowed tcp ports
for port in 3306 9040 9050 110 143 25 21 5000:5020; do( for port in 3306 9040 9050 110 143 25 21 5000:5050; do(
iptables -A OUTPUT -d 127.0.0.0/8 -p tcp --dport $port -m owner --gid-owner www-data -j ACCEPT; iptables -A OUTPUT -d 127.0.0.0/8 -p tcp --dport $port -m owner --gid-owner www-data -j ACCEPT;
ip6tables -A OUTPUT -d ::1 -p tcp --dport $port -m owner --gid-owner www-data -j ACCEPT ip6tables -A OUTPUT -d ::1 -p tcp --dport $port -m owner --gid-owner www-data -j ACCEPT
)done )done