JPT/masterthesis
0
0
Fork 0
Code Issues Pull Requests Activity

Fix typo that temporarily allowed client-to-client communication over IPv6

Browse Source
This commit is contained in:
Jan Philipp Timme 2018-09-22 11:05:58 +02:00
parent c1dd674319
commit 3744284fcc
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
iptables/install-iptables-rules.sh
View File

@ -83,7 +83,7 @@ iptables -t nat -A POSTROUTING -s 10.2.0.0/16 ! -d 10.2.0.0/16 -j SNAT --to 141.
# Datenverkehr zwischen VPN-Clients ist verboten und wird verworfen.
iptables -A FORWARD -s 10.2.0.0/16 -d 10.2.0.0/16 -j log_and_drop
ip6tables -A FORWARD -s 2001:638:614:1750::/64 -d 2001:683:614:1750::/64 -j log_and_drop
ip6tables -A FORWARD -s 2001:638:614:1750::/64 -d 2001:638:614:1750::/64 -j log_and_drop
# Datenverkehr aus dem VPN zu Hosts in der DMZ ist verboten.
#iptables -A FORWARD -s 10.2.0.0/16 -d 141.71.38.0/24 -j log_and_drop