change RELATED,ESTABLISHED to ESTABLISHED

Information

ID: 28
PHID: PHID-TASK-f2fiw5mxdrcm5slzwhu2
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

Source of inspiration:
[Tails-dev] Reducing attack surface of kernel and tightening firewall/sysctls
https://www.mail-archive.com/tails-dev@boum.org/msg07483.html

In https://github.com/Whonix/whonix-gw-firewall/blob/master/usr/bin/whonix_firewall#L249

changing

iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

to

iptables -A INPUT -m state --state ESTABLISHED -j ACCEPT

Currently testing on my local machine.

Other testers welcome.

Comments


Patrick

2014-12-19 11:45:33 UTC


Patrick

2023-05-09 09:00:18 UTC


Patrick

2023-05-09 09:24:02 UTC