input rather than forward
This commit is contained in:
parent
71b0bb2b63
commit
5630f6eed1
|
@ -405,8 +405,8 @@ function firewall_block_domain {
|
|||
blocked_domain="$1"
|
||||
if ! grep "$blocked_domain" $FIREWALL_DOMAINS; then
|
||||
hexstr=$(domain_to_hex_string $blocked_domain)
|
||||
iptables -I FORWARD -p udp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
iptables -I FORWARD -p tcp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
iptables -A INPUT -p udp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
iptables -A INPUT -p tcp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
echo "${blocked_domain}" >> $FIREWALL_DOMAINS
|
||||
save_firewall_settings
|
||||
fi
|
||||
|
@ -416,8 +416,8 @@ function firewall_unblock_domain {
|
|||
unblocked_domain="$1"
|
||||
if grep "${unblocked_domain}" $FIREWALL_DOMAINS; then
|
||||
hexstr=$(domain_to_hex_string $unblocked_domain)
|
||||
iptables -D FORWARD -p udp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
iptables -D FORWARD -p tcp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
iptables -D INPUT -p udp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
iptables -D INPUT -p tcp --dport 53 -m string --hex-string "$hexstr" --algo bm -j DROP
|
||||
sed -i "/${unblocked_domain}/d" $FIREWALL_DOMAINS
|
||||
save_firewall_settings
|
||||
fi
|
||||
|
|
Loading…
Reference in New Issue