saving uncommitted changes in /etc prior to apt run
This commit is contained in:
+3
-39
@@ -3,32 +3,8 @@
|
||||
:INPUT ACCEPT [0:0]
|
||||
:FORWARD DROP [0:0]
|
||||
:OUTPUT ACCEPT [0:0]
|
||||
:DOCKER - [0:0]
|
||||
:DOCKER-INGRESS - [0:0]
|
||||
:DOCKER-ISOLATION-STAGE-1 - [0:0]
|
||||
:DOCKER-ISOLATION-STAGE-2 - [0:0]
|
||||
:DOCKER-USER - [0:0]
|
||||
-A FORWARD -d 10.6.0.0/24 -i enxb827eb4e3dec -o wg0 -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment wireguard-forward-rule -j ACCEPT
|
||||
-A FORWARD -s 10.6.0.0/24 -i wg0 -o enxb827eb4e3dec -m comment --comment wireguard-forward-rule -j ACCEPT
|
||||
-A FORWARD -j DOCKER-USER
|
||||
-A FORWARD -j DOCKER-INGRESS
|
||||
-A FORWARD -j DOCKER-ISOLATION-STAGE-1
|
||||
-A FORWARD -o docker0 -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A FORWARD -o docker0 -j DOCKER
|
||||
-A FORWARD -i docker0 ! -o docker0 -j ACCEPT
|
||||
-A FORWARD -i docker0 -o docker0 -j ACCEPT
|
||||
-A FORWARD -o docker_gwbridge -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
|
||||
-A FORWARD -o docker_gwbridge -j DOCKER
|
||||
-A FORWARD -i docker_gwbridge ! -o docker_gwbridge -j ACCEPT
|
||||
-A FORWARD -i docker_gwbridge -o docker_gwbridge -j DROP
|
||||
-A DOCKER-INGRESS -j RETURN
|
||||
-A DOCKER-ISOLATION-STAGE-1 -i docker0 ! -o docker0 -j DOCKER-ISOLATION-STAGE-2
|
||||
-A DOCKER-ISOLATION-STAGE-1 -i docker_gwbridge ! -o docker_gwbridge -j DOCKER-ISOLATION-STAGE-2
|
||||
-A DOCKER-ISOLATION-STAGE-1 -j RETURN
|
||||
-A DOCKER-ISOLATION-STAGE-2 -o docker0 -j DROP
|
||||
-A DOCKER-ISOLATION-STAGE-2 -o docker_gwbridge -j DROP
|
||||
-A DOCKER-ISOLATION-STAGE-2 -j RETURN
|
||||
-A DOCKER-USER -j RETURN
|
||||
-A FORWARD -d 10.6.0.0/24 -i eth0 -o wg0 -m conntrack --ctstate RELATED,ESTABLISHED -m comment --comment wireguard-forward-rule -j ACCEPT
|
||||
-A FORWARD -s 10.6.0.0/24 -i wg0 -o eth0 -m comment --comment wireguard-forward-rule -j ACCEPT
|
||||
COMMIT
|
||||
# Completed on Mon Jan 24 09:15:18 2022
|
||||
# Generated by iptables-save v1.8.7 on Mon Jan 24 09:15:18 2022
|
||||
@@ -37,18 +13,6 @@ COMMIT
|
||||
:INPUT ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [0:0]
|
||||
:POSTROUTING ACCEPT [0:0]
|
||||
:DOCKER - [0:0]
|
||||
:DOCKER-INGRESS - [0:0]
|
||||
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER-INGRESS
|
||||
-A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER
|
||||
-A OUTPUT -m addrtype --dst-type LOCAL -j DOCKER-INGRESS
|
||||
-A OUTPUT ! -d 127.0.0.0/8 -m addrtype --dst-type LOCAL -j DOCKER
|
||||
-A POSTROUTING -s 10.6.0.0/24 -o enxb827eb4e3dec -m comment --comment wireguard-nat-rule -j MASQUERADE
|
||||
-A POSTROUTING -s 172.17.0.0/16 ! -o docker0 -j MASQUERADE
|
||||
-A POSTROUTING -o docker_gwbridge -m addrtype --src-type LOCAL -j MASQUERADE
|
||||
-A POSTROUTING -s 172.18.0.0/16 ! -o docker_gwbridge -j MASQUERADE
|
||||
-A DOCKER -i docker0 -j RETURN
|
||||
-A DOCKER -i docker_gwbridge -j RETURN
|
||||
-A DOCKER-INGRESS -j RETURN
|
||||
-A POSTROUTING -s 10.6.0.0/24 -o eth0 -m comment --comment wireguard-nat-rule -j MASQUERADE
|
||||
COMMIT
|
||||
# Completed on Mon Jan 24 09:15:18 2022
|
||||
|
||||
Reference in New Issue
Block a user