update to icmp-admin-prohibited

makes more sense for the intended usage
This commit is contained in:
Rui Quintino
2025-08-20 23:41:38 +01:00
committed by GitHub
parent c58a7da257
commit 2b46e47360

View File

@@ -114,7 +114,7 @@ iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -m set --match-set allowed-domains dst -j ACCEPT
# Explicitly REJECT all other outbound traffic for immediate feedback
iptables -A OUTPUT -j REJECT --reject-with icmp-port-unreachable
iptables -A OUTPUT -j REJECT --reject-with icmp-admin-prohibited
echo "Firewall configuration complete"
echo "Verifying firewall rules..."