From 6879b88bfd8c671ebf49181c7eacf73ad614bbe3 Mon Sep 17 00:00:00 2001 From: "Robert \"ar\" Gerus" Date: Tue, 12 Mar 2013 17:28:59 +0100 Subject: [PATCH] it should work now. --- README | 0 rules/04-kasha-local-connections | 13 +++++++------ 2 files changed, 7 insertions(+), 6 deletions(-) create mode 100644 README diff --git a/README b/README new file mode 100644 index 0000000..e69de29 diff --git a/rules/04-kasha-local-connections b/rules/04-kasha-local-connections index 007eac8..ae3fd51 100644 --- a/rules/04-kasha-local-connections +++ b/rules/04-kasha-local-connections @@ -1,9 +1,10 @@ #!/bin/bah rules() { - iptables -t filter $flag INPUT -i lo -j ACCEPT - iptables -t filter $flag OUTPUT -o lo -j ACCEPT - iptables -t filter $flag OUTPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p tcp -m tcp --sport 53 -j ACCEPT - iptables -t filter $flag OUTPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p udp -m udp --sport 53 -j ACCEPT - iptables -t filter $flag INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p tcp -m tcp --dport 53 -j ACCEPT - iptables -t filter $flag INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p udp -m udp --dport 53 -j ACCEPT + for chain in OUTPUT INPUT; do + for proto in tcp udp; do + for type in s d; do + iptables -t filter $flag INPUT -s 127.0.0.0/8 -d 127.0.0.0/8 -p ${proto} -m ${proto} --${type}port 53 -j ACCEPT; + done + done + done }