kunsi/bundlewrap
1
0
Fork 0
Code Issues 1 Pull requests 2 Releases Activity

rework iptables configuration
All checks were successful
bundlewrap/pipeline/head This commit looks good
Details

Browse source
This commit is contained in:
Franzi 2021-03-21 10:30:04 +01:00
parent d3ea06c3e8
commit b943d2d465
Signed by: kunsi
GPG key ID: 12E3D2136B818350
8 changed files with 93 additions and 98 deletions
Download patch file Download diff file Expand all files Collapse all files

4
bundles/dhcpd/metadata.py
View file

@ -56,13 +56,13 @@ def get_listen_interfaces(metadata):
)
def iptables(metadata):
rules = set()
for _, subnet in node.metadata.get('dhcpd/subnets', {}).items():
for subnet in node.metadata.get('dhcpd/subnets', {}).values():
rules.add('iptables -A INPUT -i {} -p udp --dport 67:68 -j ACCEPT'.format(subnet['interface']))
return {
'iptables': {
'bundle_rules': {
# iptables bundle relies on this being a list.
# can't use port_rules here. We're generating interface based rules here.
'dhcpd': sorted(list(rules)),
},
}