admin/gluetun
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added firewall rules to connect to port 8888 of tinyproxy

Browse Source
This commit is contained in:
Quentin McGaw
2019-06-27 15:27:57 +02:00
parent cc140464b8
commit 1879909d59
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
entrypoint.sh
View File

@@ -265,12 +265,21 @@ if [ "$FIREWALL" == "on" ]; then
iptables -A OUTPUT -d $SUBNET -j ACCEPT iptables -A OUTPUT -d $SUBNET -j ACCEPT
exitOnError $? exitOnError $?
printf "DONE\n" printf "DONE\n"
printf " * Accept connections from $SUBNET to port 8888 for web proxy\n"
iptables -A INPUT -p tcp -s $SUBNET --dport 8888 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
exitOnError $?
printf " * Accept established and related input traffic for web proxy\n"
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
exitOnError $?
for EXTRASUBNET in ${EXTRA_SUBNETS//,/ } for EXTRASUBNET in ${EXTRA_SUBNETS//,/ }
do do
printf " * Accept output traffic with extra subnet $EXTRASUBNET..." printf " * Accept output traffic with extra subnet $EXTRASUBNET..."
iptables -A OUTPUT -d $EXTRASUBNET -j ACCEPT iptables -A OUTPUT -d $EXTRASUBNET -j ACCEPT
exitOnError $? exitOnError $?
printf "DONE\n" printf "DONE\n"
printf " * Accept connections from $EXTRASUBNET to port 8888 for web proxy\n"
iptables -A INPUT -p tcp -s $EXTRASUBNET --dport 8888 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
exitOnError $?
done done
for ip in $VPNIPS; do for ip in $VPNIPS; do
printf " * Accept output traffic to $ip on interface eth0, port $PROTOCOL $PORT..." printf " * Accept output traffic to $ip on interface eth0, port $PROTOCOL $PORT..."