Bugfix: correct mistakes in firewall settings files

The files were not entirely synced with my local copies and contained invalid configurations.

diff --git a/level_3/firewall/data/settings/firewall-first b/level_3/firewall/data/settings/firewall-first
index df2f847b1b2d51a6efb12f1909d8a347e3b37d12..f564da25f8d9f3c43ba67e5e461cbdca03b36775 100644 (file)
--- a/level_3/firewall/data/settings/firewall-first
+++ b/level_3/firewall/data/settings/firewall-first
@@ -1,5 +1,6 @@
 # fss-0002
 
+
 main:
   # initialize the firewall
   direction none
@@ -7,8 +8,11 @@ main:
 
   rule -F
   rule -Z
+
+  tool iptables
   rule -t nat -F
   rule -t mangle -F
+  tool ip46tables
 
   # setup initial operations
   direction input

diff --git a/level_3/firewall/data/settings/firewall-last b/level_3/firewall/data/settings/firewall-last
index d6fa7c0ede5c5436f5ae03f513fee0ac7faecabc..b2132fa47c02a0ccdb9e4c9056b982edf07edbb5 100644 (file)
--- a/level_3/firewall/data/settings/firewall-last
+++ b/level_3/firewall/data/settings/firewall-last
@@ -101,71 +101,6 @@ output-udp:
 
 
 input-icmp:
-  tool iptables
-  direction input
-  protocol icmp
-
-  # allow all icmp input, such as pings
-  #rule -m state --state NEW -j ACCEPT
-
-  # allow icmp: echo reply (outbound ping)
-  #rule --icmp-type 0 -m state --state NEW -j ACCEPT
-
-  # allow icmp: destination unreachable
-  rule --icmp-type 3 -m state --state NEW -j ACCEPT
-
-  # allow icmp: source quench
-  rule --icmp-type 4 -m state --state NEW -j ACCEPT
-
-  # allow icmp: redirect
-  rule --icmp-type 5 -m state --state NEW -j ACCEPT
-
-  # allow icmp: echo request (inbound ping)
-  rule --icmp-type 8 -m state --state NEW -j ACCEPT
-
-  # allow icmp: router advertisement
-  rule --icmp-type 9 -m state --state NEW -j ACCEPT
-
-  # allow icmp: router Solicitation
-  rule --icmp-type 10 -m state --state NEW -j ACCEPT
-
-  # allow icmp: time exceeded
-  rule --icmp-type 11 -m state --state NEW -j ACCEPT
-
-  # allow icmp: bad ip header
-  rule --icmp-type 12 -m state --state NEW -j ACCEPT
-
-  # allow icmp: timestamp
-  rule --icmp-type 13 -m state --state NEW -j ACCEPT
-
-  # allow icmp: timestamp reply
-  rule --icmp-type 14 -m state --state NEW -j ACCEPT
-
-  # allow icmp: information request
-  rule --icmp-type 15 -m state --state NEW -j ACCEPT
-
-  # allow icmp: information reply
-  rule --icmp-type 16 -m state --state NEW -j ACCEPT
-
-  # allow icmp: address request
-  rule --icmp-type 17 -m state --state NEW -j ACCEPT
-
-  # allow icmp: address reply
-  rule --icmp-type 18 -m state --state NEW -j ACCEPT
-
-  # allow icmp: traceroute
-  #rule --icmp-type 30 -m state --state NEW -j ACCEPT
-
-
-output-icmp:
-  direction output
-  protocol icmp
-
-  # allow icmp output, such as pings
-  rule -m state --state NEW -j ACCEPT
-
-
-input-icmp:
   direction input
 
 

diff --git a/level_3/firewall/data/settings/firewall-other b/level_3/firewall/data/settings/firewall-other
index 5009f2a0b35154193208d2f89b9dee708580a765..40d9ae684420cde073025bbf32f3efb897053323 100644 (file)
--- a/level_3/firewall/data/settings/firewall-other
+++ b/level_3/firewall/data/settings/firewall-other
@@ -1,5 +1,6 @@
 # fss-0002
 
+
 stop:
   action policy