Merge pull request #5700 from mailcow/staging
[Netfilter] fix mailcow isolation rule for iptables
This commit is contained in:
commit
20c90642f9
@ -219,7 +219,7 @@ class IPTables:
|
|||||||
|
|
||||||
# insert mailcow isolation rule
|
# insert mailcow isolation rule
|
||||||
rule = iptc.Rule()
|
rule = iptc.Rule()
|
||||||
rule.in_interface = f'! {_interface}'
|
rule.in_interface = f'!{_interface}'
|
||||||
rule.out_interface = _interface
|
rule.out_interface = _interface
|
||||||
rule.protocol = 'tcp'
|
rule.protocol = 'tcp'
|
||||||
rule.create_target("DROP")
|
rule.create_target("DROP")
|
||||||
@ -234,7 +234,7 @@ class IPTables:
|
|||||||
if _allow != "":
|
if _allow != "":
|
||||||
rule = iptc.Rule()
|
rule = iptc.Rule()
|
||||||
rule.src = _allow
|
rule.src = _allow
|
||||||
rule.in_interface = f'! {_interface}'
|
rule.in_interface = f'!{_interface}'
|
||||||
rule.out_interface = _interface
|
rule.out_interface = _interface
|
||||||
rule.protocol = 'tcp'
|
rule.protocol = 'tcp'
|
||||||
rule.create_target("ACCEPT")
|
rule.create_target("ACCEPT")
|
||||||
|
Loading…
Reference in New Issue
Block a user