more explicit REJECT on snakebite whitehole

RETURN is implicit and assumes the default will be REJECT
python · Sep 7, 2023 · 0e2a423 · 0e2a423
1 parent ed19ff8
commit 0e2a423
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/pillar/base/firewall/snakebite.sls b/pillar/base/firewall/snakebite.sls
@@ -4,6 +4,6 @@ firewall:
   snakebite-blackhole-udp:
     raw: -A INPUT -p udp --destination-port 56666 -j DROP
   snakebite-whitehole-tcp:
-    raw: -A INPUT -p tcp --destination-port 56667 -j RETURN
+    raw: -A INPUT -p tcp --destination-port 56667 -j REJECT
   snakebite-whitehole-udp:
-    raw: -A INPUT -p udp --destination-port 56667 -j RETURN
+    raw: -A INPUT -p udp --destination-port 56667 -j REJECT