DROP every IPv6 queries

2020-05-14 10:21:53 -04:00 · 2020-05-14 10:21:53 -04:00 · b522759457
parent f87c15f7b8
commit b522759457
1 changed files with 3 additions and 2 deletions
--- a/post-fs-data.sh
+++ b/post-fs-data.sh
@ -10,6 +10,7 @@ MODDIR=${0%/*}

 iptables -t nat -A OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
 iptables -t nat -A OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
-ip6tables -A OUTPUT -p tcp --dport 53 -j DROP
-ip6tables -A OUTPUT -p udp --dport 53 -j DROP
+ip6tables -P INPUT DROP
+ip6tables -P FORWARD DROP
+ip6tables -P OUTPUT DROP