diff options
| author | cassiopc <cassiopc@gmail.com> | 2015-09-11 14:42:05 +0000 |
|---|---|---|
| committer | cassiopc <cassiopc@gmail.com> | 2015-09-11 14:42:05 +0000 |
| commit | 5702d8cdcaf4784545a893657edf5e5429bc0cc8 (patch) | |
| tree | 453ab55ecbd79547f121ae6a2d9657d696a1cdf7 /tools/etc/network | |
| parent | f9f21ae94bbdcc63907e46271cd87b7a588e1baf (diff) | |
| parent | 40ed6646e902830881fe2c530ce110d73f5a5a0b (diff) | |
| download | boca-5702d8cdcaf4784545a893657edf5e5429bc0cc8.tar.gz boca-5702d8cdcaf4784545a893657edf5e5429bc0cc8.zip | |
Merge branch 'master' of github.com:cassiopc/boca
Diffstat (limited to 'tools/etc/network')
| -rw-r--r-- | tools/etc/network/if-up.d/boca | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/tools/etc/network/if-up.d/boca b/tools/etc/network/if-up.d/boca index 0f31ee0..20ff38f 100644 --- a/tools/etc/network/if-up.d/boca +++ b/tools/etc/network/if-up.d/boca @@ -6,9 +6,22 @@ fi /sbin/iptables -F INPUT /sbin/iptables -A INPUT -i lo -j ACCEPT /sbin/iptables -A INPUT -s 143.107.255.15 -j ACCEPT + +# just to make things easier, let's allow communication to/from BOCA servers +/sbin/iptables -A INPUT -s 45.33.30.235 -j ACCEPT +/sbin/iptables -A INPUT -s 50.116.19.221 -j ACCEPT + if [ "$BOCASERVER" != "" ]; then /sbin/iptables -A INPUT -s $BOCASERVER -j ACCEPT fi +if [ "$BOCASERVERS" != "" ]; then + for i in `echo $BOCASERVERS | tr ';' ' '`; do + /sbin/iptables -A INPUT -s $i -j ACCEPT + done +fi +/sbin/iptables -A INPUT -m udp -p udp -s 0/0 --sport 67:68 --dport 67:68 -j ACCEPT +/sbin/iptables -A INPUT -m udp -p udp -s 0/0 --sport 53 --dport 53 -j ACCEPT +/sbin/iptables -A INPUT -m tcp -p tcp -s 0/0 --sport 53 --dport 53 -j ACCEPT /sbin/iptables -A INPUT -j REJECT else if [ -x /etc/icpc/bocaserver.iptables ]; then |