From ad0e8cd378a0d335f14b40d045dc129b30b9bedc Mon Sep 17 00:00:00 2001 From: Andreas Fankhauser hiddenalpha.ch Date: Fri, 12 Apr 2024 23:22:36 +0200 Subject: Try fix traceroute iptables config. --- src/firewall/src-default | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/firewall/src-default b/src/firewall/src-default index 027c4c0..a8d6d05 100644 --- a/src/firewall/src-default +++ b/src/firewall/src-default @@ -37,10 +37,14 @@ #-A INPUT -p icmp --icmp-type echo-request -j ACCEPT #-A OUTPUT -p icmp --icmp-type echo-reply -j ACCEPT -# Traceroute client +# Traceroute client (ToBeVerified) +#-A OUTPUT -p icmp --icmp-type 8 -j ACCEPT +#-A INPUT -p icmp --icmp-type 11 -j ACCEPT #-A OUTPUT -p udp -m udp --match multiport --dports 33434:33523 -j ACCEPT +#-A INPUT -p udp -m udp --match multiport --sports 33434:33523 -j ACCEPT # Traceroute server +#-A INPUT -p icmp --icmp-type 8 -j ACCEPT #-A INPUT -p udp --dport 33434:33523 -j REJECT # NTP client -- cgit v1.1