[pisa-src] r2937 - trunk/openwrt/router-configurations/pisa-testbed/etc/hip/hipfw.conf
- From: Rene Hummen <Rene.Hummen@xxxxxxxxxxxxxxxxxxxxx>
- To: pisa-src@xxxxxxxxxxxxx
- Date: Wed, 21 Mar 2012 16:09:01 +0100
Author: hummen
Date: Wed Mar 21 16:08:59 2012
New Revision: 2937
Log:
add rule to hipfw on router preventing I1s from external networks
Modified:
trunk/openwrt/router-configurations/pisa-testbed/etc/hip/hipfw.conf
Modified: trunk/openwrt/router-configurations/pisa-testbed/etc/hip/hipfw.conf
==============================================================================
--- trunk/openwrt/router-configurations/pisa-testbed/etc/hip/hipfw.conf Tue Mar
20 19:20:06 2012 (r2936)
+++ trunk/openwrt/router-configurations/pisa-testbed/etc/hip/hipfw.conf Wed Mar
21 16:08:59 2012 (r2937)
@@ -9,6 +9,7 @@
# -state [!] <state> --verify_responder --accept_mobile
--decrypt_contents
# -cert <root certificate>"
#
+INPUT -type I1 -i eth1 DROP
FORWARD -cert /etc/hip/pisa-root-cert.pem ACCEPT
INPUT ACCEPT
OUTPUT ACCEPT
--
This is the pisa developer mailing list. Please also subscribe to the main pisa
list at:
//www.freelists.org/list/pisa
Other related posts:
- » [pisa-src] r2937 - trunk/openwrt/router-configurations/pisa-testbed/etc/hip/hipfw.conf - Rene Hummen
