1
0
mirror of https://github.com/OpenNebula/one.git synced 2025-03-25 02:50:08 +03:00
This commit is contained in:
Jaime Melis 2016-03-17 17:17:31 +01:00
commit 875f0362c0

View File

@ -271,6 +271,7 @@ module SGIPTables
# IP-spofing
if nic[:filter_ip_spoofing] == "YES"
commands.add :iptables, "-A #{chain_out} -p udp --source 0.0.0.0/32 --sport 68 --destination 255.255.255.255/32 --dport 67 -j ACCEPT"
commands.add :iptables, "-A #{chain_out} ! --source #{nic[:ip]} -j DROP"
end