From 346beb7ced839f4719f2f1963ec5f0cece027af3 Mon Sep 17 00:00:00 2001
From: uvok cheetah
Date: Sun, 2 Feb 2025 16:55:01 +0100
Subject: reject and drop forwarding of packages

---
 roles/linux-ns/files/iptables/iptables.save | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'roles/linux-ns/files/iptables/iptables.save')

diff --git a/roles/linux-ns/files/iptables/iptables.save b/roles/linux-ns/files/iptables/iptables.save
index 7a4504f..4f72cc5 100644
--- a/roles/linux-ns/files/iptables/iptables.save
+++ b/roles/linux-ns/files/iptables/iptables.save
@@ -1,6 +1,6 @@
 *filter
 :INPUT DROP [0:0]
-:FORWARD ACCEPT [0:0]
+:FORWARD DROP [0:0]
 :OUTPUT ACCEPT [0:0]
 
 -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
@@ -19,4 +19,6 @@
 -A INPUT -p udp --dport 53 -j ACCEPT
 -A INPUT -p tcp --dport 53 -j ACCEPT
 
+-A FORWARD -j REJECT --reject-with icmp-port-unreachable
+
 COMMIT
-- 
cgit v1.2.3