Skip to content

Commit 3fd3c7e

Browse files
authored
Merge pull request #44 from CodeNow/remove-iptable
Remove iptable
2 parents 68b6a6e + 7f5bdfa commit 3fd3c7e

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

lib/iptables.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,10 @@ iptables::run_rules() {
1212

1313
# drop all new traffic from container ip to runnable infra
1414
iptables -I FORWARD -s ${DOCKER_NETWORK} -d 10.0.0.0/8 -m state --state NEW -j DROP
15-
# log container traffic for PSAD
16-
iptables -I FORWARD -s ${DOCKER_NETWORK} -j LOG
15+
1716
# drop all local container to container traffic
1817
iptables -I FORWARD -s ${DOCKER_NETWORK} -d ${DOCKER_NETWORK} -j DROP
18+
1919
# allow consul access (should be before drop)
2020
iptables -I FORWARD -s ${DOCKER_NETWORK} -d ${CONSUL_HOSTNAME} -j ACCEPT
2121

0 commit comments

Comments
 (0)