Drop any outgoing telnet connections
This commit is contained in:
parent
4a0982acd0
commit
794962ac85
|
@ -153,6 +153,19 @@ function configure_firewall {
|
||||||
mark_completed $FUNCNAME
|
mark_completed $FUNCNAME
|
||||||
}
|
}
|
||||||
|
|
||||||
|
function firewall_drop_telnet {
|
||||||
|
if [[ $(is_completed $FUNCNAME) == "1" ]]; then
|
||||||
|
return
|
||||||
|
fi
|
||||||
|
# telnet isn't enabled as an input and we can also
|
||||||
|
# drop any outgoing telnet, just in case
|
||||||
|
iptables -A OUTPUT -p tcp --dport telnet -j REJECT
|
||||||
|
iptables -A OUTPUT -p udp --dport telnet -j REJECT
|
||||||
|
function_check save_firewall_settings
|
||||||
|
save_firewall_settings
|
||||||
|
mark_completed $FUNCNAME
|
||||||
|
}
|
||||||
|
|
||||||
function configure_firewall_ping {
|
function configure_firewall_ping {
|
||||||
if [[ $(is_completed $FUNCNAME) == "1" ]]; then
|
if [[ $(is_completed $FUNCNAME) == "1" ]]; then
|
||||||
return
|
return
|
||||||
|
|
|
@ -561,6 +561,9 @@ function setup_firewall {
|
||||||
function_check configure_firewall_ping
|
function_check configure_firewall_ping
|
||||||
configure_firewall_ping
|
configure_firewall_ping
|
||||||
|
|
||||||
|
function_check firewall_drop_telnet
|
||||||
|
firewall_drop_telnet
|
||||||
|
|
||||||
function_check configure_firewall_for_dns
|
function_check configure_firewall_for_dns
|
||||||
configure_firewall_for_dns
|
configure_firewall_for_dns
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue