matthew/sonic-buildimage
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[caclmgrd] remove default DROP rule on FORWARD chain (#5034)

Browse Source
This commit is contained in:
Joe LeVeque 2020-07-24 11:59:46 -07:00 committed by Abhishek Dosi
parent 0ec979dd30
commit 4a2db8e216
1 changed files with 0 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
files/image_config/caclmgrd/caclmgrd
View File

@ -358,9 +358,7 @@ class ControlPlaneAclManager(object):
# add iptables/ip6tables commands to drop all other incoming packets
if num_ctrl_plane_acl_rules > 0:
iptables_cmds.append("iptables -A INPUT -j DROP")
iptables_cmds.append("iptables -A FORWARD -j DROP")
iptables_cmds.append("ip6tables -A INPUT -j DROP")
iptables_cmds.append("ip6tables -A FORWARD -j DROP")
return iptables_cmds