Block outgoing traffic to local networks by default #434

Merged
greg merged 2 commits from feature/block_outoing_local_traffic into feature/qemu_snapshots 2022-10-22 11:50:28 +00:00

View File

@ -32,3 +32,18 @@ firewall_rule 'ssh-alt-port' do
protocol :tcp
command :allow
end
%w{
10.0.0.0/8
172.16.0.0/12
192.168.0.0/16
100.64.0.0/10
}.each do |ip|
firewall_rule "unauthorized-private-network-#{ip}" do
interface "enp35s0"
destination ip
direction :out
protocol :none
command :deny
end
end