We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
firewall { '123 allow http*s to security.debian.org v4 ': proto => 'tcp', destination => 'security.debian.org', dport => [80,443], action => 'accept', chain => 'OUTPUT', }
configures only one IP address:
-A OUTPUT -d 151.101.130.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow http*s to security.debian.org v4 " -j ACCEPT
Configure all IPs for an hostname, thus:
-A OUTPUT -d 151.101.2.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT -A OUTPUT -d 151.101.66.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT -A OUTPUT -d 151.101.130.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT -A OUTPUT -d 151.101.194.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT
firewall ressource above
Same is true for IPv6
The text was updated successfully, but these errors were encountered:
No branches or pull requests
Describe the Bug
firewall { '123 allow http*s to security.debian.org v4 ':
proto => 'tcp',
destination => 'security.debian.org',
dport => [80,443],
action => 'accept',
chain => 'OUTPUT',
}
configures only one IP address:
-A OUTPUT -d 151.101.130.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow http*s to security.debian.org v4 " -j ACCEPT
Expected Behavior
Configure all IPs for an hostname, thus:
-A OUTPUT -d 151.101.2.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT
-A OUTPUT -d 151.101.66.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT
-A OUTPUT -d 151.101.130.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT
-A OUTPUT -d 151.101.194.132/32 -p tcp -m multiport --dports 80,443 -m comment --comment "123 allow https to security.debian.org v4 " -j ACCEPT
Steps to Reproduce
firewall ressource above
Environment
Additional Context
Same is true for IPv6
The text was updated successfully, but these errors were encountered: