mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-12-22 21:55:25 +00:00
160 lines
2.6 KiB
Plaintext
160 lines
2.6 KiB
Plaintext
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_INP \
|
||
|
--in-interface virbr0 \
|
||
|
--protocol tcp \
|
||
|
--destination-port 67 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_INP \
|
||
|
--in-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 67 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_OUT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol tcp \
|
||
|
--destination-port 68 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_OUT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 68 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_INP \
|
||
|
--in-interface virbr0 \
|
||
|
--protocol tcp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_INP \
|
||
|
--in-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_OUT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol tcp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_OUT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_FWO \
|
||
|
--in-interface virbr0 \
|
||
|
--jump REJECT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_FWI \
|
||
|
--out-interface virbr0 \
|
||
|
--jump REJECT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_FWX \
|
||
|
--in-interface virbr0 \
|
||
|
--out-interface virbr0 \
|
||
|
--jump ACCEPT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_FWO \
|
||
|
--in-interface virbr0 \
|
||
|
--jump REJECT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_FWI \
|
||
|
--out-interface virbr0 \
|
||
|
--jump REJECT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_FWX \
|
||
|
--in-interface virbr0 \
|
||
|
--out-interface virbr0 \
|
||
|
--jump ACCEPT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_INP \
|
||
|
--in-interface virbr0 \
|
||
|
--protocol tcp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_INP \
|
||
|
--in-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_OUT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol tcp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_OUT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 53 \
|
||
|
--jump ACCEPT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_INP \
|
||
|
--in-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 547 \
|
||
|
--jump ACCEPT
|
||
|
ip6tables \
|
||
|
-w \
|
||
|
--table filter \
|
||
|
--insert LIBVIRT_OUT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 546 \
|
||
|
--jump ACCEPT
|
||
|
iptables \
|
||
|
-w \
|
||
|
--table mangle \
|
||
|
--insert LIBVIRT_PRT \
|
||
|
--out-interface virbr0 \
|
||
|
--protocol udp \
|
||
|
--destination-port 68 \
|
||
|
--jump CHECKSUM \
|
||
|
--checksum-fill
|