(self)
| 433 | 'rule': 'iifname "eth1" tcp dport 3922 ct state established,new counter accept'}) |
| 434 | |
| 435 | def setup_router_control(self): |
| 436 | if self.config.is_routed(): |
| 437 | self.setup_router_control_routing() |
| 438 | return |
| 439 | |
| 440 | if self.config.is_vpc(): |
| 441 | return |
| 442 | |
| 443 | self.fw.append( |
| 444 | ["filter", "", "-A FW_OUTBOUND -m state --state RELATED,ESTABLISHED -j ACCEPT"]) |
| 445 | self.fw.append( |
| 446 | ["filter", "", "-A INPUT -i eth1 -p tcp -m tcp --dport 3922 -m state --state NEW,ESTABLISHED -j ACCEPT"]) |
| 447 | |
| 448 | self.fw.append(["filter", "", "-P INPUT DROP"]) |
| 449 | self.fw.append(["filter", "", "-P FORWARD DROP"]) |
| 450 | |
| 451 | def fw_router(self): |
| 452 | if self.config.is_vpc() or self.config.is_routed() or self.config.is_dhcp(): |
no test coverage detected