From 117b9035e519315d3c67bb53db44fc83103ba23d Mon Sep 17 00:00:00 2001 From: Dan Radez Date: Fri, 12 Aug 2016 11:00:03 -0400 Subject: adding DNS to ports to block in mock-detach Change-Id: Ic1be571650a301384b91981f3c2a362fa50c7414 Signed-off-by: Dan Radez --- ci/util.sh | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) (limited to 'ci') diff --git a/ci/util.sh b/ci/util.sh index 6681ff56..bcb3a3a7 100755 --- a/ci/util.sh +++ b/ci/util.sh @@ -91,13 +91,19 @@ parse_cmdline() { ;; mock-detached) if [ "$2" == "on" ]; then - echo "Blocking output http and https traffic" + echo "Blocking output http (80) traffic" iptables -A OUTPUT -p tcp --dport 80 -j REJECT + echo "Blocking output https (443) traffic" iptables -A OUTPUT -p tcp --dport 443 -j REJECT + echo "Blocking output dns (53) traffic" + iptables -A OUTPUT -p tcp --dport 53 -j REJECT elif [ "$2" == "off" ]; then - echo "Allowing output http and https traffic" + echo "Allowing output http (80) traffic" iptables -D OUTPUT -p tcp --dport 80 -j REJECT + echo "Allowing output https (443) traffic" iptables -D OUTPUT -p tcp --dport 443 -j REJECT + echo "Allowing output dns (53) traffic" + iptables -D OUTPUT -p tcp --dport 53 -j REJECT else display_usage fi -- cgit 1.2.3-korg