GRIN/nym
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

add default output test

Browse Source
This commit is contained in:
benedettadavico
2025-11-24 13:44:28 +01:00
parent 26f4dd8f39
commit 42c051dfa3
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/nym-node-setup/network-tunnel-manager.sh
+12 -1
View File
@@ -916,10 +916,11 @@ check_iptables_default_policies() {
info "checking base iptables default policies (INPUT/FORWARD)"
local issues=0
local input_policy forward_policy
local input_policy forward_policy output_policy
input_policy=$(iptables -S INPUT 2>/dev/null | awk 'NR==1 && $1=="-P" {print $3}')
forward_policy=$(iptables -S FORWARD 2>/dev/null | awk 'NR==1 && $1=="-P" {print $3}')
output_policy=$(iptables -S OUTPUT 2>/dev/null | awk 'NR==1 && $1=="-P" {print $3}')
if [[ -z "${input_policy:-}" ]]; then
error "unable to read INPUT default policy (iptables -S INPUT failed?)"
@@ -941,6 +942,16 @@ check_iptables_default_policies() {
ok "FORWARD default policy is DROP"
fi
if [[ -z "${output_policy:-}" ]]; then
error "unable to read OUTPUT default policy (iptables -S OUTPUT failed?)"
issues=1
elif [[ "${output_policy^^}" != "ACCEPT" ]]; then
error "OUTPUT default policy is ${output_policy^^}; expected ACCEPT"
issues=1
else
ok "OUTPUT default policy is ACCEPT"
fi
return $issues
}