xZero707/dockerfiles
1
0
Fork 0
mirror of https://github.com/jessfraz/dockerfiles.git synced 2025-04-10 22:22:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

updates for shorewall configs

Browse Source 
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
This commit is contained in:
Jessica Frazelle 2015-07-28 04:13:26 -07:00
parent 38c04d1758
commit ae2529386d
4 changed files with 12 additions and 10 deletions

4
shorewall/etc/interfaces

@ -11,5 +11,5 @@
############################################################################### ###############################################################################
#ZONE INTERFACE OPTIONS #ZONE INTERFACE OPTIONS
- lo ignore - lo ignore
dock docker0 dock docker0 bridge
net all dhcp,physical=+,routeback net all dhcp,physical=+

3
shorewall/etc/masq

@ -9,5 +9,4 @@
################################################################################################################ ################################################################################################################
#INTERFACE:DEST SOURCE ADDRESS PROTO PORT(S) IPSEC MARK USER/ SWITCH ORIGINAL #INTERFACE:DEST SOURCE ADDRESS PROTO PORT(S) IPSEC MARK USER/ SWITCH ORIGINAL
# GROUP DEST # GROUP DEST
#eth0 172.17.0.0/16 #net 172.17.0.0/16
#wlan0 172.17.42.1/24

6
shorewall/etc/policy

@ -9,9 +9,11 @@
############################################################################### ###############################################################################
#SOURCE DEST POLICY LOG LIMIT: CONNLIMIT: #SOURCE DEST POLICY LOG LIMIT: CONNLIMIT:
# LEVEL BURST MASK # LEVEL BURST MASK
dock all ACCEPT dock net ACCEPT
# on a server you would obviously want to accept dock fw ACCEPT
net dock DROP net dock DROP
net all DROP net all DROP
fw net ACCEPT fw net ACCEPT
fw dock ACCEPT fw dock ACCEPT

7
shorewall/etc/rules

@ -16,7 +16,8 @@
?SECTION UNTRACKED ?SECTION UNTRACKED
?SECTION NEW ?SECTION NEW
Invalid(DROP) net $FW tcp Invalid(DROP) net $FW tcp
# on a server you would obiously want to accept here Invalid(DROP) net dock tcp
SSH(DROP) net $FW Invalid(DROP) net dock udp
#SSH(ACCEPT) net $FW
# on a server you would obviously want to accept here # on a server you would obviously want to accept here
Ping(DROP) net $FW #Ping(ACCEPT) net $FW