diff --git a/alpine/files/rules-save b/alpine/files/rules-save index 4abac60..cb2687a 100644 --- a/alpine/files/rules-save +++ b/alpine/files/rules-save @@ -6,4 +6,6 @@ -A INPUT -i lo -j ACCEPT # Ping -A INPUT -p icmp -j ACCEPT +# SSH +-A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT COMMIT diff --git a/alpine/init.sh b/alpine/init.sh index 2049ae1..ba15a49 100644 --- a/alpine/init.sh +++ b/alpine/init.sh @@ -67,12 +67,6 @@ IP6TablesInstall() { SSHEnableRootLogin() { sed -i "/PermitRootLogin prohibit-password/c\PermitRootLogin yes #prohibit-password" /etc/ssh/sshd_config service sshd restart - - if [ -f "/etc/iptables/rules-save" ]; then - sed -i '/^-A INPUT -i lo -j ACCEPT.*/a -A INPUT -p tcp -m tcp --dport 22 -m state --state NEW -j ACCEPT' /etc/iptables/rules-save - sed -i '/^-A INPUT -i lo -j ACCEPT.*/a # SSH' /etc/iptables/rules-save - iptables-restore /etc/iptables/rules-save - fi } SNMPDInstall() { cummunityname=public