mister-devel/Scripts_MiSTer
1
0
Fork 0
mirror of https://github.com/MiSTer-devel/Scripts_MiSTer.git synced 2026-04-19 03:05:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Version 1.0.1

Browse Source 
Cosmetic changes.
This commit is contained in:
Locutus73
2019-02-05 12:21:52 +01:00
committed by GitHub
parent b81afc6503
commit e50ec3acd6
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
security_fixes.sh
View File

@@ -18,6 +18,7 @@
# You can download the latest version of this script from:
# https://github.com/MiSTer-devel/Scripts_MiSTer
# Version 1.0.1 - 2019-02-05 - Cosmetic changes.
# Version 1.0 - 2019-02-02 - First commit
@@ -304,6 +305,9 @@ then
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"#-A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT"
fi
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'""
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Now you should read up on iptables rules and consider whether ssh access"
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# for everyone is really desired. Most likely you will only allow access from certain IPs."
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'""
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Allows FTP connections"
if [ -f /etc/init.d/S50proftpd ]
then
@@ -326,9 +330,6 @@ then
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"#-A INPUT -p tcp -m state --state NEW --dport 445 -j ACCEPT"
fi
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'""
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Now you should read up on iptables rules and consider whether ssh access"
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# for everyone is really desired. Most likely you will only allow access from certain IPs."
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'""
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Allow ping"
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# note that blocking other types of icmp packets is considered a bad idea by some"
IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# remove -m icmp --icmp-type 8 from this line to allow all kinds of icmp:"