kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests Releases Activity

bundles/{netdata,nginx,unbound}: fix iptables rules (should also create ip6tables rules)
Some checks failed
bundlewrap/pipeline/head There was a failure building this commit
Details

Browse source
This commit is contained in:
Franzi 2021-01-02 16:19:55 +01:00
parent e8d131b041
commit 03d3ab6e9d
Signed by: kunsi
GPG key ID: 12E3D2136B818350
3 changed files with 8 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
bundles/netdata/metadata.py
View file

@ -23,10 +23,10 @@ def iptables(metadata):
if len(interfaces):
for iface in sorted(interfaces):
iptables.append(f'iptables -A INPUT -i {iface} -p tcp --dport 19999 -j ACCEPT')
iptables.append(f'iptables_both -A INPUT -i {iface} -p tcp --dport 19999 -j ACCEPT')
else:
iptables.append('iptables -A INPUT -p tcp --dport 19999 -j ACCEPT')
iptables.append('iptables_both -A INPUT -p tcp --dport 19999 -j ACCEPT')
return {
'iptables': {

8
bundles/nginx/metadata.py
View file

@ -140,12 +140,12 @@ def iptables(metadata):
if len(interfaces):
for iface in sorted(interfaces):
iptables.append(f'iptables -A INPUT -i {iface} -p tcp --dport 80 -j ACCEPT')
iptables.append(f'iptables -A INPUT -i {iface} -p tcp --dport 443 -j ACCEPT')
iptables.append(f'iptables_both -A INPUT -i {iface} -p tcp --dport 80 -j ACCEPT')
iptables.append(f'iptables_both -A INPUT -i {iface} -p tcp --dport 443 -j ACCEPT')
else:
iptables.append('iptables -A INPUT -p tcp --dport 80 -j ACCEPT')
iptables.append('iptables -A INPUT -p tcp --dport 443 -j ACCEPT')
iptables.append('iptables_both -A INPUT -p tcp --dport 80 -j ACCEPT')
iptables.append('iptables_both -A INPUT -p tcp --dport 443 -j ACCEPT')
return {
'iptables': {

4
bundles/unbound/metadata.py
View file

@ -40,8 +40,8 @@ def iptables(metadata):
iptables = []
for iface in sorted(interfaces):
iptables.append(f'iptables -A INPUT -i {iface} -p tcp --dport 53 -j ACCEPT')
iptables.append(f'iptables -A INPUT -i {iface} -p udp --dport 53 -j ACCEPT')
iptables.append(f'iptables_both -A INPUT -i {iface} -p tcp --dport 53 -j ACCEPT')
iptables.append(f'iptables_both -A INPUT -i {iface} -p udp --dport 53 -j ACCEPT')
return {
'iptables': {