drop redundant firewall rule

vanilla-dpup · Jul 15, 2024 · daa2334 · daa2334
1 parent a774198
commit daa2334
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/woof-code/rootfs-packages/firewall_ng/usr/sbin/firewall_ng b/woof-code/rootfs-packages/firewall_ng/usr/sbin/firewall_ng
@@ -263,8 +263,10 @@ fi
 # and other worms have infected systems blasting pings.
 # Comment the line below if you want pings logged, but it
 # will likely fill your logs.
-iptables -A INPUT -p ICMP -s 0/0 --icmp-type 8 -j DROP
-ip6tables -A INPUT -p ICMPV6 --icmpv6-type 128 -j DROP
+if [ "\$LOGGING" = "true" ];then
+	iptables -A INPUT -p ICMP -s 0/0 --icmp-type 8 -j DROP
+	ip6tables -A INPUT -p ICMPV6 --icmpv6-type 128 -j DROP
+fi
 
 # Time Exceeded
 iptables -A INPUT -p ICMP -s 0/0 --icmp-type 11 -j ACCEPT