aboutsummaryrefslogtreecommitdiffstats
path: root/etc/webserver.net
diff options
context:
space:
mode:
authorLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
committerLibravatar netblue30 <netblue30@yahoo.com>2020-04-21 08:24:28 -0400
commit018d75775eab4a0f045949a9d069c57686ca2686 (patch)
treeaac3a1a65cca0d4875795c55109a5c3e35efdefb /etc/webserver.net
parentsmall fixes (diff)
downloadfirejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.gz
firejail-018d75775eab4a0f045949a9d069c57686ca2686.tar.zst
firejail-018d75775eab4a0f045949a9d069c57686ca2686.zip
reorganize github etc directory
Diffstat (limited to 'etc/webserver.net')
-rw-r--r--etc/webserver.net29
1 files changed, 0 insertions, 29 deletions
diff --git a/etc/webserver.net b/etc/webserver.net
deleted file mode 100644
index 83db76825..000000000
--- a/etc/webserver.net
+++ /dev/null
@@ -1,29 +0,0 @@
1*filter
2:INPUT DROP [0:0]
3:FORWARD DROP [0:0]
4:OUTPUT DROP [0:0]
5
6###################################################################
7# Simple webserver filter
8#
9# Usage:
10# firejail --net=eth0 --ip=192.168.1.105 --netfilter=/etc/firejail/webserver.net /etc/init.d/apache2 start
11# firejail --net=eth0 --ip=192.168.1.105 --netfilter=/etc/firejail/webserver.net /etc/init.d/nginx start
12#
13###################################################################
14
15# allow webserver traffic
16-A INPUT -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
17-A OUTPUT -p tcp --sport 80 -m state --state ESTABLISHED -j ACCEPT
18-A INPUT -p tcp --dport 443 -m state --state NEW,ESTABLISHED -j ACCEPT
19-A OUTPUT -p tcp --sport 443 -m state --state ESTABLISHED -j ACCEPT
20
21# allow incoming ping
22-A INPUT -p icmp --icmp-type echo-request -j ACCEPT
23-A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT
24
25# allow outgoing DNS
26-A OUTPUT -p udp --dport 53 -j ACCEPT
27-A INPUT -p udp --sport 53 -j ACCEPT
28
29COMMIT