Revise firewall rules in relation to issue #3856

globaleaks · Dec 14, 2023 · d83e071 · d83e071
1 parent 7bf3f67
commit d83e071
Showing 1 changed file with 0 additions and 9 deletions.
diff --git a/debian/globaleaks.init b/debian/globaleaks.init
@@ -118,15 +118,6 @@ network_sandboxing_start()
         return
     fi
 
-    iptables -m comment --comment "globaleaks" -t mangle -A PREROUTING -p tcp -m tcp --dport 8080 -j MARK --set-mark 1
-    ip6tables -m comment --comment "globaleaks" -t mangle -A PREROUTING -p tcp -m tcp --dport 8080 -j MARK --set-mark 1
-
-    iptables -m comment --comment "globaleaks" -t mangle -A PREROUTING -p tcp -m tcp --dport 8443 -j MARK --set-mark 1
-    ip6tables -m comment --comment "globaleaks" -t mangle -A PREROUTING -p tcp -m tcp --dport 8443 -j MARK --set-mark 1
-
-    iptables -m comment --comment "globaleaks" -A INPUT -m mark --mark 1 -j REJECT
-    ip6tables -m comment --comment "globaleaks" -A INPUT -m mark --mark 1 -j REJECT
-
     if [[ "$REACHABLE_VIA_WEB" -eq "1" ]]; then
         iptables -m comment --comment "globaleaks" -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080
         ip6tables -m comment --comment "globaleaks" -t nat -A PREROUTING -p tcp --dport 80 -j REDIRECT --to-port 8080