Skip to content

Instantly share code, notes, and snippets.

@bradfitz

bradfitz/udp-off.sh

Created March 6, 2020 17:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save bradfitz/99413ad5767dcf2166245e6c12adc05c to your computer and use it in GitHub Desktop.
Save bradfitz/99413ad5767dcf2166245e6c12adc05c to your computer and use it in GitHub Desktop.
Download ZIP
hacky scripts to toggle UDP access on a machine
Raw
udp-off.sh
#!/bin/sh
set -e
set -x
./udp-on.sh
iptables -A INPUT -p udp --sport 53 -j ACCEPT
iptables -A INPUT -p udp -j DROP
iptables -A OUTPUT -p udp --dport 53 -j ACCEPT
iptables -A OUTPUT -p udp -j DROP
ip6tables -A INPUT -p udp --sport 53 -j ACCEPT
ip6tables -A INPUT -p udp -j DROP
ip6tables -A OUTPUT -p udp --dport 53 -j ACCEPT
ip6tables -A OUTPUT -p udp -j DROP
Raw
udp-on.sh
#!/bin/sh
set -e
set -x
iptables -D INPUT -p udp --sport 53 -j ACCEPT || true
iptables -D INPUT -p udp -j DROP || true
iptables -D OUTPUT -p udp --dport 53 -j ACCEPT || true
iptables -D OUTPUT -p udp -j DROP || true
ip6tables -D INPUT -p udp --sport 53 -j ACCEPT || true
ip6tables -D INPUT -p udp -j DROP || true
ip6tables -D OUTPUT -p udp --dport 53 -j ACCEPT || true
ip6tables -D OUTPUT -p udp -j DROP || true
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment