mirror of
https://github.com/EFForg/rayhunter.git
synced 2026-06-08 22:11:53 -07:00
Ember
17 lines
573 B
Bash
17 lines
573 B
Bash
#!/bin/sh
|
|
case "$1" in
|
|
start)
|
|
if [ -f /data/rayhunter/firewall-enabled ]; then
|
|
iptables -F OUTPUT
|
|
iptables -A OUTPUT -o lo -j ACCEPT
|
|
iptables -A OUTPUT -o bridge0 -j ACCEPT
|
|
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
|
|
iptables -A OUTPUT -p udp --dport 67:68 -j ACCEPT
|
|
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
|
|
iptables -A OUTPUT -p tcp --dport 53 -j ACCEPT
|
|
iptables -A OUTPUT -j DROP
|
|
echo 0 > /proc/sys/net/bridge/bridge-nf-call-iptables 2>/dev/null
|
|
fi
|
|
;;
|
|
esac
|