conntrackt Files · conntrackt/templates/conntrackt/entity

Files @ 202776b43053

Branch filter:

Location: conntrackt/conntrackt/templates/conntrackt/entity_iptables.html

202776b43053 710 B text/html Show Annotation Show as Raw Download as Raw

branko

Fixed the listing of incoming connections (destination was displayed instead of source). Switched to using non-styled lists for incoming/outgoing connections.

# iptables rules generated by conntrackt for {{entity}}
*filter
:INPUT ACCEPT [0:0]
{% for interface in entity.interface_set.all %}{% for communication in interface.destination_set.all %}
{% ifchanged communication.description %}

{% if communication.description %}
# {{communication.description}}
{% endif %}
{% endifchanged %}
iptables -A INPUT -s {{communication.source.address}}/{{communication.source.netmask}} -p {{communication.protocol|lower}} -m {{communication.protocol|lower}} --dport {{communication.port}} -j ACCEPT
{% endfor %}
{% endfor %}
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
COMMIT
*nat
:PREROUTING ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
COMMIT