# HG changeset patch # User Branko Majic # Date 2013-05-25 11:44:14 # Node ID da362b930a68b66fc4bc89ae7bb3aeec37862e23 # Parent 6fd135ca87cc37bad51e16a9762c1d7d8aaf2361 Changed default policy for generated iptables rules for INPUT and FORWARD chain to DROP. Changed administration link to point to Conntrackt-specific admin page. diff --git a/conntrackt/templates/conntrackt/entity_iptables.html b/conntrackt/templates/conntrackt/entity_iptables.html --- a/conntrackt/templates/conntrackt/entity_iptables.html +++ b/conntrackt/templates/conntrackt/entity_iptables.html @@ -1,7 +1,7 @@ {% load conntrackt_tags %} # iptables rules generated by conntrackt for {{entity}} *filter -:INPUT ACCEPT [0:0] +:INPUT DROP [0:0] {% for interface in entity.interface_set.all %} {% for communication in interface.destination_set.all %} {% ifchanged communication.description %} @@ -15,7 +15,7 @@ {% iptables communication %} {% endfor %} {% endfor %} -:FORWARD ACCEPT [0:0] +:FORWARD DROP [0:0] :OUTPUT ACCEPT [0:0] COMMIT *nat diff --git a/conntrackt/templates/conntrackt/template.html b/conntrackt/templates/conntrackt/template.html --- a/conntrackt/templates/conntrackt/template.html +++ b/conntrackt/templates/conntrackt/template.html @@ -31,7 +31,7 @@ {% block header %}