Ajout : iodined tunnel IP sur DNS.

[lhc/ateliers.git] / etc / shorewall / policy

diff --git a/etc/shorewall/policy b/etc/shorewall/policy
index 4c9f3d8..5b450eb 100644 (file)
--- a/etc/shorewall/policy
+++ b/etc/shorewall/policy
@@ -1,7 +1,8 @@
 # DOC: shorewall-policy(5)
 ###############################################################################
 #SOURCE         DEST            POLICY          LOG LEVEL       LIMIT:BURST
-$FW             net             DROP
+dns             all             DROP
+$FW             all             DROP
 net             all             DROP            info
 # XXX: the following policy must be last
 all             all             REJECT          info