From 8e7114710d21f38bfcad11afc9265691ef428c11 Mon Sep 17 00:00:00 2001 From: Mahakam20000 Date: Wed, 26 Feb 2020 16:36:18 +0100 Subject: [PATCH 1/2] Revisioning DHCP port I'm fixing my mistake on the previous pull request DHCP port is 67 **udp protocol**, so I delete the tcp rule. It was useless. DHCP must assign the IP address, so we can't check the IP address of the source. If we do so, it simply will not work. --- docs/main/prerequesites.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/docs/main/prerequesites.md b/docs/main/prerequesites.md index 269e2a8..2c7dd6c 100644 --- a/docs/main/prerequesites.md +++ b/docs/main/prerequesites.md @@ -68,8 +68,7 @@ iptables -I INPUT 1 -s 127.0.0.0/8 -p tcp -m tcp --dport 53 -j ACCEPT iptables -I INPUT 1 -s 127.0.0.0/8 -p udp -m udp --dport 53 -j ACCEPT iptables -I INPUT 1 -s 192.168.0.0/16 -p tcp -m tcp --dport 53 -j ACCEPT iptables -I INPUT 1 -s 192.168.0.0/16 -p udp -m udp --dport 53 -j ACCEPT -iptables -I INPUT 1 -s 192.168.0.0/16 -p tcp -m tcp --dport 67 -j ACCEPT -iptables -I INPUT 1 -s 192.168.0.0/16 -p udp -m udp --dport 67 -j ACCEPT +iptables -I INPUT 1 -p udp -m udp --dport 67 -j ACCEPT iptables -I INPUT 1 -p tcp -m tcp --dport 4711:4720 -i lo -j ACCEPT iptables -I INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT ``` @@ -77,7 +76,7 @@ iptables -I INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT IP6Tables (IPv6) ```bash -ip6tables -I INPUT -s fe80::/10 -p udp -m udp --sport 546:547 --dport 546:547 -j ACCEPT +ip6tables -I INPUT -p udp -m udp --sport 546:547 --dport 546:547 -j ACCEPT ip6tables -I INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT ``` From e98ab758251017aff31c5571bb0d0a3fe64b5c22 Mon Sep 17 00:00:00 2001 From: Dan Schaper Date: Sun, 1 Mar 2020 00:21:07 -0800 Subject: [PATCH 2/2] Update docs/main/prerequesites.md --- docs/main/prerequesites.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/main/prerequesites.md b/docs/main/prerequesites.md index 2c7dd6c..dc04e30 100644 --- a/docs/main/prerequesites.md +++ b/docs/main/prerequesites.md @@ -68,7 +68,7 @@ iptables -I INPUT 1 -s 127.0.0.0/8 -p tcp -m tcp --dport 53 -j ACCEPT iptables -I INPUT 1 -s 127.0.0.0/8 -p udp -m udp --dport 53 -j ACCEPT iptables -I INPUT 1 -s 192.168.0.0/16 -p tcp -m tcp --dport 53 -j ACCEPT iptables -I INPUT 1 -s 192.168.0.0/16 -p udp -m udp --dport 53 -j ACCEPT -iptables -I INPUT 1 -p udp -m udp --dport 67 -j ACCEPT +iptables -I INPUT 1 -p udp --dport 67:68 --sport 67:68 -j ACCEPT iptables -I INPUT 1 -p tcp -m tcp --dport 4711:4720 -i lo -j ACCEPT iptables -I INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT ```