webui-new/development/simplefirewall/simplefirewall.sh
2025-03-24 22:39:52 +08:00

17 lines
558 B
Bash

#!/bin/bash
# Define the ports you want to block
PORTS=("80" "443") # Default ports, will be modified by the install script
# First, allow specified ports on bridge0, eth0, and tailscale0
for port in "${PORTS[@]}"; do
iptables -A INPUT -i bridge0 -p tcp --dport $port -j ACCEPT
iptables -A INPUT -i eth0 -p tcp --dport $port -j ACCEPT
iptables -A INPUT -i tailscale0 -p tcp --dport $port -j ACCEPT
done
# Then, block specified ports on all other interfaces
for port in "${PORTS[@]}"; do
iptables -A INPUT -p tcp --dport $port -j DROP
done