diff --git a/security_fixes.sh b/security_fixes.sh index d470046..617cbf6 100644 --- a/security_fixes.sh +++ b/security_fixes.sh @@ -18,6 +18,7 @@ # You can download the latest version of this script from: # https://github.com/MiSTer-devel/Scripts_MiSTer +# Version 1.0.1 - 2019-02-05 - Cosmetic changes. # Version 1.0 - 2019-02-02 - First commit @@ -304,6 +305,9 @@ then IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"#-A INPUT -p tcp -m state --state NEW --dport 22 -j ACCEPT" fi IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"" + IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Now you should read up on iptables rules and consider whether ssh access" + IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# for everyone is really desired. Most likely you will only allow access from certain IPs." + IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"" IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Allows FTP connections" if [ -f /etc/init.d/S50proftpd ] then @@ -326,9 +330,6 @@ then IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"#-A INPUT -p tcp -m state --state NEW --dport 445 -j ACCEPT" fi IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"" - IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Now you should read up on iptables rules and consider whether ssh access" - IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# for everyone is really desired. Most likely you will only allow access from certain IPs." - IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"" IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# Allow ping" IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# note that blocking other types of icmp packets is considered a bad idea by some" IPTABLES_UP_RULES=$IPTABLES_UP_RULES$'\n'"# remove -m icmp --icmp-type 8 from this line to allow all kinds of icmp:"