Browse Source

Add new recidive chain

Adding a new firewall chain to block ALL connection attempts from abusers (block connection to all ports). Since a repeated abuser could have been banned for different attempts (MAIL, SSH, etc) it could be wise to block him completely.
ifaist0s 6 years ago
parent
commit
8f6fa7225a
1 changed files with 1 additions and 0 deletions
  1. 1 0
      bin/v-add-firewall-chain

+ 1 - 0
bin/v-add-firewall-chain

@@ -62,6 +62,7 @@ case $chain in
     WEB)        port='80,443'; protocol=TCP  ;;
     DB)         port='3306,5432'; protocol=TCP  ;;
     HESTIA)     port=$hestiaport; protocol=TCP  ;;
+    RECIDIVE)   port='1:65535'; protocol=TCP  ;;
     *)          check_args '2' "$#" 'CHAIN PORT' ;;
 esac