iptables update

1 files changed, 5 insertions, 1 deletions

diff --git a/core/conf/iptables/ipt-firewall.sh b/core/conf/iptables/ipt-firewall.sh
index 6dc4f4f..c581e6e 100644
--- a/core/conf/iptables/ipt-firewall.sh
+++ b/core/conf/iptables/ipt-firewall.sh
@@ -1,5 +1,7 @@
 #!/bin/bash
 
+. /etc/iptables/ipt-conf.sh
+
 ipt_clear () {
     echo "clear all iptables tables"
 
@@ -92,7 +94,7 @@ ipt_tables () {
     egrep -v "^#|^$" x | while IFS= read -r ip
     do
       # Append everything to droplist
-      echo "adding ${ip} to blockip"
+      #echo "adding ${ip} to blockip"
       $IPT -A blockip_in -s $ip -j LOG --log-prefix "${SPAMDROPMSG}"
       $IPT -A blockip_in -s $ip -j DROP
       $IPT -A blockip_out -d $ip -j LOG --log-prefix "${SPAMDROPMSG}"
@@ -242,8 +244,10 @@ ipt_tables () {
     $IPT -A cli_ftp_out -j RETURN
 
     ######## GIT client
+    $IPT -A cli_git_in -p tcp --sport 873 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT
     $IPT -A cli_git_in -p tcp --sport 9418 --dport 1024:65535 -m state --state ESTABLISHED -j ACCEPT
     $IPT -A cli_git_in -j RETURN
+    $IPT -A cli_git_out -p tcp --dport 873 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT
     $IPT -A cli_git_out -p tcp --dport 9418 --sport 1024:65535 -m state --state NEW,ESTABLISHED -j ACCEPT
     $IPT -A cli_git_out -j RETURN