citadel/meta-citadel/recipes-citadel/bbappends/iptables/iptables.rules

*filter
:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT DROP [0:0]
-A INPUT -m state --state ESTABLISHED -j ACCEPT
-A OUTPUT -p udp -m udp --sport 68 --dport 67 -j ACCEPT
-A OUTPUT -p udp -m owner --uid-owner systemd-timesync -j ACCEPT
-A OUTPUT -j LOG --log-uid --log-prefix 'iptables'
COMMIT
Install iptables rules 2020-11-29 23:35:52 +00:00			`*filter`
			`:INPUT DROP [0:0]`
			`:FORWARD ACCEPT [0:0]`
			`:OUTPUT DROP [0:0]`
			`-A INPUT -m state --state ESTABLISHED -j ACCEPT`
			`-A OUTPUT -p udp -m udp --sport 68 --dport 67 -j ACCEPT`
Use the name 'systemd-timesync' rather than the uid which can change 2022-09-15 16:39:56 +00:00			`-A OUTPUT -p udp -m owner --uid-owner systemd-timesync -j ACCEPT`
Install iptables rules 2020-11-29 23:35:52 +00:00			`-A OUTPUT -j LOG --log-uid --log-prefix 'iptables'`
			`COMMIT`