diff --git a/Makefile b/Makefile index 633033c..fca3203 100644 --- a/Makefile +++ b/Makefile @@ -76,3 +76,14 @@ upgrade-gns3-server: get-busy-box-static: bash get-busy-box-static.sh + +disable-firewalld: + systemctl disable firewalld + systemctl stop firewalld + +init-iptables: + dnf install -y iptables-services iptables-utils + cp -vf rules.v4 /etc/sysconfig/iptables + cp -vf rules.v6 /etc/sysconfig/ip6tables + systemctl start iptables + systemctl enable iptables diff --git a/get-busy-box-static.sh b/get-busy-box-static.sh index 73cbb2c..b113a49 100755 --- a/get-busy-box-static.sh +++ b/get-busy-box-static.sh @@ -3,7 +3,7 @@ set -x set -e -docker run -d --name busybox_extractor -v ${pwd}:/installer debian:12 sleep 3600 +docker run -d --name busybox_extractor -v $(pwd):/installer debian:12 sleep 3600 docker exec -it busybox_extractor apt update diff --git a/rules.v4 b/rules.v4 index e69de29..b400300 100644 --- a/rules.v4 +++ b/rules.v4 @@ -0,0 +1,40 @@ +# Generated by iptables-save v1.8.5 on Thu Sep 19 06:28:39 2024 +*filter +:INPUT ACCEPT [1292:268675] +:FORWARD ACCEPT [0:0] +:OUTPUT ACCEPT [1233:136774] +-A INPUT -i lo -j ACCEPT +-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT +-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT +COMMIT +# Completed on Thu Sep 19 06:28:39 2024 +# Generated by iptables-save v1.8.5 on Thu Sep 19 06:28:39 2024 +*security +:INPUT ACCEPT [1739:304377] +:FORWARD ACCEPT [0:0] +:OUTPUT ACCEPT [1233:136774] +COMMIT +# Completed on Thu Sep 19 06:28:39 2024 +# Generated by iptables-save v1.8.5 on Thu Sep 19 06:28:39 2024 +*raw +:PREROUTING ACCEPT [1953:339671] +:OUTPUT ACCEPT [1233:136774] +COMMIT +# Completed on Thu Sep 19 06:28:39 2024 +# Generated by iptables-save v1.8.5 on Thu Sep 19 06:28:39 2024 +*mangle +:PREROUTING ACCEPT [1953:339671] +:INPUT ACCEPT [1740:304575] +:FORWARD ACCEPT [0:0] +:OUTPUT ACCEPT [1233:136774] +:POSTROUTING ACCEPT [1233:136774] +COMMIT +# Completed on Thu Sep 19 06:28:39 2024 +# Generated by iptables-save v1.8.5 on Thu Sep 19 06:28:39 2024 +*nat +:PREROUTING ACCEPT [54:8717] +:INPUT ACCEPT [2:116] +:POSTROUTING ACCEPT [3:196] +:OUTPUT ACCEPT [3:196] +COMMIT +# Completed on Thu Sep 19 06:28:39 2024 diff --git a/rules.v6 b/rules.v6 index e9d7fd8..99449e6 100644 --- a/rules.v6 +++ b/rules.v6 @@ -1,37 +1,40 @@ -# Generated by ip6tables-save v1.8.5 on Tue Aug 27 02:40:47 2024 +# Generated by ip6tables-save v1.8.5 on Thu Sep 19 06:28:50 2024 *filter -:INPUT ACCEPT [9:758] +:INPUT ACCEPT [21:1792] :FORWARD ACCEPT [0:0] -:OUTPUT ACCEPT [9:608] +:OUTPUT ACCEPT [22:1552] +-A INPUT -i lo -j ACCEPT +-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT +-A FORWARD -m state --state RELATED,ESTABLISHED -j ACCEPT COMMIT -# Completed on Tue Aug 27 02:40:47 2024 -# Generated by ip6tables-save v1.8.5 on Tue Aug 27 02:40:47 2024 +# Completed on Thu Sep 19 06:28:50 2024 +# Generated by ip6tables-save v1.8.5 on Thu Sep 19 06:28:50 2024 *security -:INPUT ACCEPT [9:758] +:INPUT ACCEPT [23:1932] :FORWARD ACCEPT [0:0] -:OUTPUT ACCEPT [9:608] +:OUTPUT ACCEPT [22:1552] COMMIT -# Completed on Tue Aug 27 02:40:47 2024 -# Generated by ip6tables-save v1.8.5 on Tue Aug 27 02:40:47 2024 +# Completed on Thu Sep 19 06:28:50 2024 +# Generated by ip6tables-save v1.8.5 on Thu Sep 19 06:28:50 2024 *raw -:PREROUTING ACCEPT [9:758] -:OUTPUT ACCEPT [9:608] +:PREROUTING ACCEPT [916:164852] +:OUTPUT ACCEPT [22:1552] COMMIT -# Completed on Tue Aug 27 02:40:47 2024 -# Generated by ip6tables-save v1.8.5 on Tue Aug 27 02:40:47 2024 +# Completed on Thu Sep 19 06:28:50 2024 +# Generated by ip6tables-save v1.8.5 on Thu Sep 19 06:28:50 2024 *mangle -:PREROUTING ACCEPT [9:758] -:INPUT ACCEPT [9:758] +:PREROUTING ACCEPT [915:164634] +:INPUT ACCEPT [23:1932] :FORWARD ACCEPT [0:0] -:OUTPUT ACCEPT [9:608] -:POSTROUTING ACCEPT [9:608] +:OUTPUT ACCEPT [22:1552] +:POSTROUTING ACCEPT [22:1552] COMMIT -# Completed on Tue Aug 27 02:40:47 2024 -# Generated by ip6tables-save v1.8.5 on Tue Aug 27 02:40:47 2024 +# Completed on Thu Sep 19 06:28:50 2024 +# Generated by ip6tables-save v1.8.5 on Thu Sep 19 06:28:50 2024 *nat -:PREROUTING ACCEPT [0:0] +:PREROUTING ACCEPT [162:30261] :INPUT ACCEPT [0:0] -:POSTROUTING ACCEPT [0:0] -:OUTPUT ACCEPT [0:0] +:POSTROUTING ACCEPT [1:80] +:OUTPUT ACCEPT [1:80] COMMIT -# Completed on Tue Aug 27 02:40:47 2024 +# Completed on Thu Sep 19 06:28:50 2024