From 5c09942d54a06cefb8d12b39c9188e79ed451152 Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Mon, 14 Jan 2013 04:08:29 +0100
Subject: converted all ipv6 iptables/ip6tables scenarios

---
 testing/hosts/default/etc/ip6tables.rules |  4 ++++
 testing/hosts/default/etc/iptables.drop   | 12 ++++++++++++
 2 files changed, 16 insertions(+)
 create mode 100644 testing/hosts/default/etc/iptables.drop

(limited to 'testing/hosts')

diff --git a/testing/hosts/default/etc/ip6tables.rules b/testing/hosts/default/etc/ip6tables.rules
index f793cb10d..6a2c6af8e 100644
--- a/testing/hosts/default/etc/ip6tables.rules
+++ b/testing/hosts/default/etc/ip6tables.rules
@@ -28,6 +28,10 @@
 -A INPUT  -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT
 -A OUTPUT -p icmpv6 --icmpv6-type neighbor-advertisement -j ACCEPT
 
+# allow crl and certficate fetch from winnetou
+-A INPUT  -i eth0 -p tcp --sport 80 -s fec0::15 -j ACCEPT
+-A OUTPUT -o eth0 -p tcp --dport 80 -d fec0::15 -j ACCEPT
+
 # log dropped packets
 -A INPUT  -j LOG --log-prefix " IN: "
 -A OUTPUT -j LOG --log-prefix " OUT: "
diff --git a/testing/hosts/default/etc/iptables.drop b/testing/hosts/default/etc/iptables.drop
new file mode 100644
index 000000000..445c45669
--- /dev/null
+++ b/testing/hosts/default/etc/iptables.drop
@@ -0,0 +1,12 @@
+*filter
+
+# default policy is DROP
+-P INPUT DROP
+-P OUTPUT DROP
+-P FORWARD DROP
+
+# allow ssh
+-A INPUT  -p tcp --dport 22 -j ACCEPT
+-A OUTPUT -p tcp --sport 22 -j ACCEPT
+
+COMMIT
-- 
cgit v1.2.3