update to icmp-admin-prohibited
makes more sense for the intended usage
This commit is contained in:
parent
c58a7da257
commit
2b46e47360
1 changed files with 1 additions and 1 deletions
|
|
@ -114,7 +114,7 @@ iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
|
|||
iptables -A OUTPUT -m set --match-set allowed-domains dst -j ACCEPT
|
||||
|
||||
# Explicitly REJECT all other outbound traffic for immediate feedback
|
||||
iptables -A OUTPUT -j REJECT --reject-with icmp-port-unreachable
|
||||
iptables -A OUTPUT -j REJECT --reject-with icmp-admin-prohibited
|
||||
|
||||
echo "Firewall configuration complete"
|
||||
echo "Verifying firewall rules..."
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue