diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2017-07-08 23:20:32 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2017-07-08 23:20:32 +0200 |
| commit | 803ac56626fcbc9864eea962640c8a295adc6db2 (patch) | |
| tree | aeb1c702d11ba36c51e207806c0705fc2f03db40 /testing/tests/tnc/tnccs-20-nea-pt-tls/hosts/alice/etc/iptables.rules | |
| parent | 88b941939f4b008fbe79e0a1ffdd71cb636a0d97 (diff) | |
| parent | 23e0d6dca32573d2d2dfeb42ee52c42ea21781c3 (diff) | |
| download | strongswan-803ac56626fcbc9864eea962640c8a295adc6db2.tar.bz2 strongswan-803ac56626fcbc9864eea962640c8a295adc6db2.tar.xz | |
Merge branch 'swima'
Diffstat (limited to 'testing/tests/tnc/tnccs-20-nea-pt-tls/hosts/alice/etc/iptables.rules')
| -rw-r--r-- | testing/tests/tnc/tnccs-20-nea-pt-tls/hosts/alice/etc/iptables.rules | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/testing/tests/tnc/tnccs-20-nea-pt-tls/hosts/alice/etc/iptables.rules b/testing/tests/tnc/tnccs-20-nea-pt-tls/hosts/alice/etc/iptables.rules new file mode 100644 index 000000000..c556d9483 --- /dev/null +++ b/testing/tests/tnc/tnccs-20-nea-pt-tls/hosts/alice/etc/iptables.rules @@ -0,0 +1,28 @@ +*filter + +# default policy is DROP +-P INPUT DROP +-P OUTPUT DROP +-P FORWARD DROP + +# open loopback interface +-A INPUT -i lo -j ACCEPT +-A OUTPUT -o lo -j ACCEPT + +# allow PT-TLS +-A INPUT -i eth0 -p tcp --dport 271 -j ACCEPT +-A OUTPUT -o eth0 -p tcp --sport 271 -j ACCEPT + +# allow inbound ssh +-A INPUT -p tcp --dport 22 -j ACCEPT +-A OUTPUT -p tcp --sport 22 -j ACCEPT + +# allow outbound ssh +-A OUTPUT -p tcp --dport 22 -j ACCEPT +-A INPUT -p tcp --sport 22 -j ACCEPT + +# allow crl fetch from winnetou +-A INPUT -i eth0 -p tcp --sport 80 -s 192.168.0.150 -j ACCEPT +-A OUTPUT -o eth0 -p tcp --dport 80 -d 192.168.0.150 -j ACCEPT + +COMMIT |