From a2d4afc7dfe278dacc64b5177ff993267c909685 Mon Sep 17 00:00:00 2001 From: jaseg Date: Mon, 15 Apr 2019 10:31:58 +0900 Subject: deploy: Fix up iptables to allow http(s) --- iptables.rules | 2 ++ 1 file changed, 2 insertions(+) diff --git a/iptables.rules b/iptables.rules index 0f6f366..db68eb5 100644 --- a/iptables.rules +++ b/iptables.rules @@ -18,6 +18,8 @@ COMMIT -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 2342 -j ACCEPT -A INPUT -p tcp -m state --state NEW -m tcp --dport 23 -j ACCEPT +-A INPUT -p tcp -m state --state NEW -m tcp --dport 80 -j ACCEPT +-A INPUT -p tcp -m state --state NEW -m tcp --dport 443 -j ACCEPT -A INPUT -j REJECT --reject-with icmp-host-prohibited -A FORWARD -j REJECT --reject-with icmp-host-prohibited COMMIT -- cgit