Skip to content

Commit 7f5bdfa

Browse files
author
Anandkumar Patel
committed
remove psad logging
1 parent 68b6a6e commit 7f5bdfa

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

lib/iptables.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,10 @@ iptables::run_rules() {
1212

1313
# drop all new traffic from container ip to runnable infra
1414
iptables -I FORWARD -s ${DOCKER_NETWORK} -d 10.0.0.0/8 -m state --state NEW -j DROP
15-
# log container traffic for PSAD
16-
iptables -I FORWARD -s ${DOCKER_NETWORK} -j LOG
15+
1716
# drop all local container to container traffic
1817
iptables -I FORWARD -s ${DOCKER_NETWORK} -d ${DOCKER_NETWORK} -j DROP
18+
1919
# allow consul access (should be before drop)
2020
iptables -I FORWARD -s ${DOCKER_NETWORK} -d ${CONSUL_HOSTNAME} -j ACCEPT
2121

0 commit comments

Comments
 (0)