diff --git a/README b/README new file mode 100644 index 0000000..e69de29 diff --git a/rules/04-kasha-local-connections b/rules/04-kasha-local-connections index 007eac8..ae3fd51 100644 --- a/rules/04-kasha-local-connections +++ b/rules/04-kasha-local-connections @@ -1,9 +1,10 @@ #!/bin/bah rules() { - iptables -t filter $flag INPUT -i lo -j ACCEPT - iptables -t filter $flag OUTPUT -o lo -j ACCEPT - iptables -t filter $flag OUTPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p tcp -m tcp --sport 53 -j ACCEPT - iptables -t filter $flag OUTPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p udp -m udp --sport 53 -j ACCEPT - iptables -t filter $flag INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p tcp -m tcp --dport 53 -j ACCEPT - iptables -t filter $flag INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p udp -m udp --dport 53 -j ACCEPT + for chain in OUTPUT INPUT; do + for proto in tcp udp; do + for type in s d; do + iptables -t filter $flag INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p ${proto} -m ${proto} --${type}port 53 -j ACCEPT; + done + done + done }