Skip to content

Instantly share code, notes, and snippets.

@tcatm
Created June 21, 2015 13:54
Show Gist options
  • Save tcatm/a520a1225808714a8da9 to your computer and use it in GitHub Desktop.
Save tcatm/a520a1225808714a8da9 to your computer and use it in GitHub Desktop.
diff --git a/roles/base/files/etc/iptables/iptables.rules b/roles/base/files/etc/iptables/iptables.rules
index defea6f..05c75f3 100644
--- a/roles/base/files/etc/iptables/iptables.rules
+++ b/roles/base/files/etc/iptables/iptables.rules
@@ -1,3 +1,8 @@
+*filter
+-A OUTPUT -o internet -p icmp -m icmp --icmp-type 3/1 -j DROP
+-A OUTPUT -o eth0 -p icmp -m icmp --icmp-type 3/1 -j DROP
+-A OUTPUT -o eth2 -p icmp -m icmp --icmp-type 3/1 -j DROP
+COMMIT
*nat
-A POSTROUTING -o ffexit -j MASQUERADE
-A POSTROUTING -o hideio -j MASQUERADE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment