reject forwarded traffic going out on the default gateway

7 years ago · 53be5c3014
parent 09ae123075
commit 53be5c3014
1 changed files with 1 additions and 0 deletions
--- a/roles/configure_iptables/templates/iptables.rules
+++ b/roles/configure_iptables/templates/iptables.rules
@ -66,6 +66,7 @@ COMMIT
 -A FORWARD -i bat{{ site.name }} -p udp --dport 10010:10021 -j REJECT
 {% endfor %}
 {% endif %}
+-A FORWARD -o {{ ansible_default_ipv4.interface }} -j REJECT

 COMMIT
 *nat