diff options
| author | James Meyer <james.meyer@operamail.com> | 2009-03-06 22:04:22 (GMT) |
|---|---|---|
| committer | James Meyer <james.meyer@operamail.com> | 2009-03-06 22:04:22 (GMT) |
| commit | 745ebc4d0b581a1e891a56b8b21c19b3bbd40c5e (patch) | |
| tree | 690c9baaf6f938da0b9203708a649bca5e980e96 /abs/extra-testing/community/moblock/MoBlock-nfq.sh.patch | |
| parent | 0d8d8e073d7118d67fd8c3bdaf7be00c76df317a (diff) | |
| download | linhes_pkgbuild-745ebc4d0b581a1e891a56b8b21c19b3bbd40c5e.zip linhes_pkgbuild-745ebc4d0b581a1e891a56b8b21c19b3bbd40c5e.tar.gz linhes_pkgbuild-745ebc4d0b581a1e891a56b8b21c19b3bbd40c5e.tar.bz2 | |
Added moblock
Diffstat (limited to 'abs/extra-testing/community/moblock/MoBlock-nfq.sh.patch')
| -rw-r--r-- | abs/extra-testing/community/moblock/MoBlock-nfq.sh.patch | 53 |
1 files changed, 53 insertions, 0 deletions
diff --git a/abs/extra-testing/community/moblock/MoBlock-nfq.sh.patch b/abs/extra-testing/community/moblock/MoBlock-nfq.sh.patch new file mode 100644 index 0000000..15e742f --- /dev/null +++ b/abs/extra-testing/community/moblock/MoBlock-nfq.sh.patch @@ -0,0 +1,53 @@ +--- MoBlock-0.8/MoBlock-nfq.sh.orig 2008-11-30 03:44:02.000000000 -0500 ++++ MoBlock-0.8/MoBlock-nfq.sh 2008-12-01 18:56:15.000000000 -0500 +@@ -3,14 +3,10 @@ + # MoBlock.sh - MoBlock start script + # --------------------------------- + +-ACTIVATE_CHAINS=1 +-WHITE_TCP_IN="" +-WHITE_UDP_IN="" +-WHITE_TCP_OUT="" +-WHITE_UDP_OUT="" +-WHITE_TCP_FORWARD="" +-WHITE_UDP_FORWARD="" ++# Some configuration options have been moved to an external conf file ++# This should make maintenance and upgrading easier + ++. /etc/moblock/config + + PIDF=/var/run/moblock.pid + +@@ -78,6 +74,17 @@ + iptables -I MOBLOCK_FW -p udp --dport $PORT -j ACCEPT + done + ++# For added IP whitelisting support ++ ++for IP in $WHITE_IP_OUT; do ++ iptables -I MOBLOCK_OUT -p all -m iprange --dst-range $IP -j ACCEPT ++done ++for IP in $WHITE_IP_IN; do ++ iptables -I MOBLOCK_IN -p all -m iprange --dst-range $IP -j ACCEPT ++done ++for IP in $WHITE_IP_FW; do ++ iptables -I MOBLOCK_FW -p all -m iprange --dst-range $IP -j ACCEPT ++done + + # Loopback traffic fix + +@@ -85,7 +92,8 @@ + iptables -I OUTPUT -p all -o lo -j ACCEPT + + # Here you can change block list and log files +-./moblock -p /etc/guarding.p2p ./moblock.log ++#./moblock -p /etc/guarding.p2p ./moblock.log ++/usr/bin/moblock -p /etc/moblock/banned.list /var/log/moblock.log >/dev/null 2>&1 + + # On exit delete the rules we added + +@@ -108,3 +116,4 @@ + if [ -f $PIDF ]; then + rm $PIDF; + fi ++ |