summaryrefslogtreecommitdiffstats
path: root/server
diff options
context:
space:
mode:
authorJonathan Bauer2015-02-04 18:11:02 +0100
committerJonathan Bauer2015-02-04 18:11:02 +0100
commitc11493c87a7f50fbfa5f92a08f79cc0867589323 (patch)
tree1d0f69710a4c80e4ba8ee5fb7f02868a839495e5 /server
parent[configs] change activation link in freiburg's config (diff)
downloadtm-scripts-c11493c87a7f50fbfa5f92a08f79cc0867589323.tar.gz
tm-scripts-c11493c87a7f50fbfa5f92a08f79cc0867589323.tar.xz
tm-scripts-c11493c87a7f50fbfa5f92a08f79cc0867589323.zip
[sshd-freiburg] iptable rule to filter out incoming connections on port 22 when coming from outside the uni net
Diffstat (limited to 'server')
-rwxr-xr-xserver/modules/sshd-freiburg/opt/openslx/iptables/rules.d/10-sshd3
1 files changed, 3 insertions, 0 deletions
diff --git a/server/modules/sshd-freiburg/opt/openslx/iptables/rules.d/10-sshd b/server/modules/sshd-freiburg/opt/openslx/iptables/rules.d/10-sshd
new file mode 100755
index 00000000..11dce812
--- /dev/null
+++ b/server/modules/sshd-freiburg/opt/openslx/iptables/rules.d/10-sshd
@@ -0,0 +1,3 @@
+#!/bin/ash
+
+iptables -w -I ipt-helper-INPUT 1 -i br0 -p tcp \! -s 132.230.0.0/16 --dport 22 -j DROP