From 3744284fccd6817bf47f45f871311b6b254b0805 Mon Sep 17 00:00:00 2001 From: Jan Philipp Timme Date: Sat, 22 Sep 2018 11:05:58 +0200 Subject: [PATCH] Fix typo that temporarily allowed client-to-client communication over IPv6 --- iptables/install-iptables-rules.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/iptables/install-iptables-rules.sh b/iptables/install-iptables-rules.sh index 1d5c92a..845be04 100644 --- a/iptables/install-iptables-rules.sh +++ b/iptables/install-iptables-rules.sh @@ -83,7 +83,7 @@ iptables -t nat -A POSTROUTING -s 10.2.0.0/16 ! -d 10.2.0.0/16 -j SNAT --to 141. # Datenverkehr zwischen VPN-Clients ist verboten und wird verworfen. iptables -A FORWARD -s 10.2.0.0/16 -d 10.2.0.0/16 -j log_and_drop -ip6tables -A FORWARD -s 2001:638:614:1750::/64 -d 2001:683:614:1750::/64 -j log_and_drop +ip6tables -A FORWARD -s 2001:638:614:1750::/64 -d 2001:638:614:1750::/64 -j log_and_drop # Datenverkehr aus dem VPN zu Hosts in der DMZ ist verboten. #iptables -A FORWARD -s 10.2.0.0/16 -d 141.71.38.0/24 -j log_and_drop