Merge branch 'block_dhcp_from_vms' of git://qubes-os.org/rafal/core

2010-06-25 18:23:14 +02:00 · 2010-06-25 18:23:14 +02:00 · 0fa26d84ea
commit 0fa26d84ea
parent ae40438d4e 42ce721063
1 changed files with 2 additions and 0 deletions
--- a/dom0/init.d/iptables
+++ b/dom0/init.d/iptables
@ -12,6 +12,8 @@ COMMIT
 :INPUT ACCEPT [0:0]
 :FORWARD ACCEPT [0:0]
 :OUTPUT ACCEPT [0:0]
+-A INPUT -i br+ -p udp -m udp --dport 68 -j DROP
+-A INPUT -i vif+ -p udp -m udp --dport 68 -j DROP
 -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT 
 -A INPUT -p icmp -j ACCEPT 
 -A INPUT -i lo -j ACCEPT