DROP IPv6 queries properly

2020-05-15 13:53:48 -04:00 · 2020-05-15 13:53:48 -04:00 · 9ad20a88fe
parent b522759457
commit 9ad20a88fe
1 changed files with 2 additions and 3 deletions
--- a/post-fs-data.sh
+++ b/post-fs-data.sh
@ -10,7 +10,6 @@ MODDIR=${0%/*}

 iptables -t nat -A OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
 iptables -t nat -A OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
-ip6tables -P INPUT DROP
-ip6tables -P FORWARD DROP
-ip6tables -P OUTPUT DROP
+ip6tables -A OUTPUT -p tcp -j DROP
+ip6tables -A OUTPUT -p udp -j DROP