+reformat
Signed-off-by: Nico Schottelius <nico@bento.schottelius.org>
This commit is contained in:
parent
2b0fc5d2f5
commit
265e6ad087
1 changed files with 4 additions and 4 deletions
|
@ -25,13 +25,13 @@ Then create the directory ~/.cdist/manifest and then the file
|
||||||
|
|
||||||
case "$__target_host" in
|
case "$__target_host" in
|
||||||
insert-your-target-host-name-here)
|
insert-your-target-host-name-here)
|
||||||
__iptables_rule policy-in --rule "-P INPUT DROP"
|
__iptables_rule policy-in --rule "-P INPUT DROP"
|
||||||
__iptables_rule policy-out --rule "-P OUTPUT ACCEPT"
|
__iptables_rule policy-out --rule "-P OUTPUT ACCEPT"
|
||||||
__iptables_rule policy-fwd --rule "-P FORWARD DROP"
|
__iptables_rule policy-fwd --rule "-P FORWARD DROP"
|
||||||
|
|
||||||
__iptables_rule established --rule "-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT"
|
__iptables_rule established --rule "-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT"
|
||||||
__iptables_rule http --rule "-A INPUT -p tcp --dport 80 -j ACCEPT"
|
__iptables_rule http --rule "-A INPUT -p tcp --dport 80 -j ACCEPT"
|
||||||
__iptables_rule ssh --rule "-A INPUT -p tcp --dport 80 -j ACCEPT"
|
__iptables_rule ssh --rule "-A INPUT -p tcp --dport 80 -j ACCEPT"
|
||||||
;;
|
;;
|
||||||
esac
|
esac
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue