Last change
on this file since 2651 was
2618,
checked in by andersk, 10 years ago
|
ip[6]tables: Really ignore SMTP to localhost
Packets in OUTPUT have an output interface, not an input interface.
|
File size:
466 bytes
|
Rev | Line | |
---|
[39] | 1 | *filter |
---|
[1689] | 2 | :INPUT ACCEPT [0:0] |
---|
[39] | 3 | :FORWARD ACCEPT [0:0] |
---|
[1689] | 4 | :OUTPUT ACCEPT [0:0] |
---|
[2614] | 5 | :log-smtp - [0:0] |
---|
| 6 | -A INPUT -p udp -m udp --dport 161 ! -s 18.0.0.0/8 -j REJECT |
---|
| 7 | -A OUTPUT -p tcp -m tcp --dport 25 --tcp-flags FIN,SYN,RST,ACK SYN -j log-smtp |
---|
[2618] | 8 | -A log-smtp -o lo -j RETURN |
---|
[2614] | 9 | -A log-smtp -m owner --uid-owner postfix -j RETURN |
---|
| 10 | -A log-smtp -m owner --uid-owner nrpe -j RETURN |
---|
| 11 | -A log-smtp -m owner --uid-owner 537644531 -j RETURN |
---|
| 12 | -A log-smtp -j LOG --log-prefix "SMTP " --log-uid |
---|
[39] | 13 | COMMIT |
---|
Note: See
TracBrowser
for help on using the repository browser.