From 7c82ee6165d04597c371944490b085c240482424 Mon Sep 17 00:00:00 2001 From: Stefan Schantl Date: Thu, 16 Aug 2018 18:50:39 +0200 Subject: [PATCH] firewall: Add chains for IPS (suricata) Signed-off-by: Stefan Schantl --- src/initscripts/system/firewall | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/initscripts/system/firewall b/src/initscripts/system/firewall index 707209987e..9a79cb1aa9 100644 --- a/src/initscripts/system/firewall +++ b/src/initscripts/system/firewall @@ -185,6 +185,11 @@ iptables_init() { iptables -A INPUT -j GUARDIAN iptables -A FORWARD -j GUARDIAN + # IPS (suricata) chains + iptables -N IPS + iptables -A INPUT -j IPS + iptables -A FORWARD -j IPS + # Block non-established IPsec networks iptables -N IPSECBLOCK iptables -A FORWARD -m policy --dir out --pol none -j IPSECBLOCK -- 2.39.5