Merge pull request 'Block outgoing traffic to local networks by default' (#434) from feature/block_outoing_local_traffic into feature/qemu_snapshots
Reviewed-on: #434
This commit is contained in:
commit
33ae6befaa
|
@ -32,3 +32,18 @@ firewall_rule 'ssh-alt-port' do
|
|||
protocol :tcp
|
||||
command :allow
|
||||
end
|
||||
|
||||
%w{
|
||||
10.0.0.0/8
|
||||
172.16.0.0/12
|
||||
192.168.0.0/16
|
||||
100.64.0.0/10
|
||||
}.each do |ip|
|
||||
firewall_rule "unauthorized-private-network-#{ip}" do
|
||||
interface "enp35s0"
|
||||
destination ip
|
||||
direction :out
|
||||
protocol :none
|
||||
command :deny
|
||||
end
|
||||
end
|
||||
|
|
Loading…
Reference in New Issue