diff --git a/examples/simple/create-fw.sh b/examples/simple/create-fw.sh index 58e5ab8..569408d 100755 --- a/examples/simple/create-fw.sh +++ b/examples/simple/create-fw.sh @@ -35,8 +35,10 @@ RANDOM_FILE=`pwd`/${RANDOM_FILE_NAME} #disable connection tracking for ts3 server sudo ${IPTABLES} -t raw -A PREROUTING -p udp --dport 9987 -j CT --notrack -#move ts3 traffic to TS3_TRAFFIC chain, and filetransfer to TCP chain -sudo ${IPTABLES} -A INPUT -p udp --dport 9987 -j TS3_UDP_TRAFFIC +#move ts3 traffic to TS3_TRAFFIC chain (do not allow fragments) +sudo ${IPTABLES} -A INPUT -p udp --dport 9987 \! -f -j TS3_UDP_TRAFFIC + +#move filetransfer to TCP chain sudo ${IPTABLES} -A INPUT -p tcp --dport 30033 -j TS3_TCP_TRAFFIC #Allow authorized clients on UDP diff --git a/examples/simple/delete-fw.sh b/examples/simple/delete-fw.sh index 01d0ecd..b86294c 100755 --- a/examples/simple/delete-fw.sh +++ b/examples/simple/delete-fw.sh @@ -13,7 +13,7 @@ fi #clear up ${IPTABLES} sudo ${IPTABLES} -t raw -D PREROUTING -p udp --dport 9987 -j CT --notrack -sudo ${IPTABLES} -D INPUT -p udp --dport 9987 -j TS3_UDP_TRAFFIC +sudo ${IPTABLES} -D INPUT -p udp --dport 9987 \! -f -j TS3_UDP_TRAFFIC sudo ${IPTABLES} -D INPUT -p tcp --dport 30033 -j TS3_TCP_TRAFFIC sudo ${IPTABLES} -F TS3_UDP_TRAFFIC