whonix-ws-firewall outgoing rule simplification

Phabricator Tickets
1

Information

ID: 111
PHID: PHID-TASK-pqo5itlz3feh2anpge4k
Author: Patrick
Status at Migration Time: resolved
Priority at Migration Time: Normal

Description

https://github.com/Whonix/whonix-ws-firewall/blob/master/usr/bin/whonix_firewall

iptables -A OUTPUT -m state --state NEW,ESTABLISHED,RELATED -j ACCEPT

Since we’re blocking invalid outgoing packages above already anyhow and since there are no other states besides these 4, we can also drop the whole -m state --state NEW,ESTABLISHED,RELATED.

sudo iptables --list shows no differences. Save to do.

Comments

Patrick

2015-01-26 18:49:34 UTC