X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/43e20546eefaa0057685ac0b62ba33f97870e13d..4f8c198960217f631e0fcb20e8615fc93c3d1da2:/local.m4 diff --git a/local.m4 b/local.m4 index 59ab342..7e7ad15 100644 --- a/local.m4 +++ b/local.m4 @@ -370,6 +370,7 @@ openports inbound ## Inspect inbound packets from untrusted sources. run ip46tables -A inbound -j forbidden +run ip46tables -A INPUT -m mark --mark $from_scary/$MASK_FROM -g inbound run ip46tables -A INPUT -m mark --mark $from_untrusted/$MASK_FROM -g inbound ## Allow responses from the scary outside world into the untrusted net, but