diff options
| author |  netblue30 <netblue30@yahoo.com> | 2017-12-06 18:06:46 -0500 |
|---|---|---|
| committer | netblue30 <netblue30@yahoo.com> | 2017-12-06 18:06:46 -0500 |
| commit | 30a15fe9d0907da202914b87111c700235319296 (patch) | |
| tree | f198cc3ec1bb9b2c19e5410d952ca3951fcd0cae /test/fnetfilter/test1.net | |
| parent | testing (diff) | |
| download | firejail-30a15fe9d0907da202914b87111c700235319296.tar.gz firejail-30a15fe9d0907da202914b87111c700235319296.tar.zst firejail-30a15fe9d0907da202914b87111c700235319296.zip | |
testing
Diffstat (limited to 'test/fnetfilter/test1.net')
| -rw-r--r-- | test/fnetfilter/test1.net | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/test/fnetfilter/test1.net b/test/fnetfilter/test1.net index 59bef1443..e60127373 100644 --- a/test/fnetfilter/test1.net +++ b/test/fnetfilter/test1.net | |||
| @@ -1,5 +1,5 @@ | |||
| 1 | *filter | 1 | *filter |
| 2 | # test2 | 2 | # test1 |
| 3 | :INPUT DROP [0:0] | 3 | :INPUT DROP [0:0] |
| 4 | :FORWARD DROP [0:0] | 4 | :FORWARD DROP [0:0] |
| 5 | :OUTPUT ACCEPT [0:0] | 5 | :OUTPUT ACCEPT [0:0] |
| @@ -9,7 +9,7 @@ | |||
| 9 | #-A INPUT -p icmp --icmp-type echo-reply -j ACCEPT | 9 | #-A INPUT -p icmp --icmp-type echo-reply -j ACCEPT |
| 10 | -A INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT | 10 | -A INPUT -p icmp --icmp-type destination-unreachable -j ACCEPT |
| 11 | -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT | 11 | -A INPUT -p icmp --icmp-type time-exceeded -j ACCEPT |
| 12 | -A INPUT -p icmp --icmp-type echo-request -j ACCEPT | 12 | -A INPUT -p icmp --icmp-type echo-request -j ACCEPT |
| 13 | # disable STUN | 13 | # disable STUN |
| 14 | -A OUTPUT -p udp --dport 3478 -j DROP | 14 | -A OUTPUT -p udp --dport 3478 -j DROP |
| 15 | -A OUTPUT -p udp --dport 3479 -j DROP | 15 | -A OUTPUT -p udp --dport 3479 -j DROP |