Reject all output connection

a0c6491e · Boxiang Sun · 726854a3 · a0c6491e
Commit a0c6491e authored Mar 07, 2022 by Boxiang Sun
Hide whitespace changes
Inline Side-by-side

Showing with 6 additions and 0 deletions

playbook/slapos-standalone.yml playbook/slapos-standalone.yml +6 -0

No files found.
--- a/playbook/slapos-standalone.yml
+++ b/playbook/slapos-standalone.yml
@@ -217,6 +217,12 @@
        ctstate: ESTABLISHED,RELATED
        jump: ACCEPT

+    - name: Reject all output connect
+      iptables:
+        chain: OUTPUT
+        table: filter
+        jump: REJECT
+
    - name: Change the download-binary-cache-url
      lineinfile:
        path: /etc/opt/slapos/slapos.cfg