Freifunk-Troisdorf/ansible.fftdf.supernode
5
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Dropping RFC1918 traffic at forwarding chain

Browse Source
This commit is contained in:
rojoka 2019-11-04 18:08:39 +01:00 committed by GitHub
parent f506425d76
commit 1e56e9326b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
files/interfaces-troisdorf7.j2
View File

@ -23,6 +23,10 @@ iface {{ sn_interface_name }} inet static
post-up iptables -A OUTPUT -o $IFACE -d 172.16.0.0/12 -j DROP post-up iptables -A OUTPUT -o $IFACE -d 172.16.0.0/12 -j DROP
post-up iptables -A OUTPUT -o $IFACE -d 169.254.0.0/16 -j DROP post-up iptables -A OUTPUT -o $IFACE -d 169.254.0.0/16 -j DROP
post-up iptables -A OUTPUT -o $IFACE -d 192.168.0.0/16 -j DROP post-up iptables -A OUTPUT -o $IFACE -d 192.168.0.0/16 -j DROP
post-up iptables -A FORWARD -o $IFACE -d 10.0.0.0/8 -j DROP
post-up iptables -A FORWARD -o $IFACE -d 172.16.0.0/12 -j DROP
post-up iptables -A FORWARD -o $IFACE -d 169.254.0.0/16 -j DROP
post-up iptables -A FORWARD -o $IFACE -d 192.168.0.0/16 -j DROP
post-up iptables -t nat -A POSTROUTING -o $IFACE -j MASQUERADE post-up iptables -t nat -A POSTROUTING -o $IFACE -j MASQUERADE
#auto 6to4 #auto 6to4
# iface 6to4 inet6 6to4 # iface 6to4 inet6 6to4