]> git.ipfire.org Git - people/ms/ipfire-2.x.git/commit
projects / people / ms / ipfire-2.x.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e83ae0d) | patch
firewall: Introduce DROP_HOSTILE
authorPeter Müller <peter.mueller@ipfire.org>
Sat, 18 Dec 2021 13:48:46 +0000 (14:48 +0100)
committerPeter Müller <peter.mueller@ipfire.org>
Fri, 14 Jan 2022 14:16:43 +0000 (14:16 +0000)
commit97154d057bdbc7fa34309e9a5ad389775eff210d
tree67e8eb95370f655041d7cb343271b83632bee9c1tree
parente83ae0d43406ad6d988f2ea56d4dbfc6da1bab90commit | diff
firewall: Introduce DROP_HOSTILE

Similar to the Location block, this chain logs and drops all traffic
from and to networks known to pose technical threats to IPFire users.

Doing so in a dedicated chain makes sense for transparency reasons, as
we won't interfer with other firewall rules or the Location block, so it
is always clear why a packet from or to such a network has been dropped.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
src/initscripts/system/firewall diff | blob | blame | history
Michael's tree of IPFire 2.x.