Feature/Bugfix: IPv6 blocking (#428)

- Feature/Bugfix: Block all IPv6 traffic with `ip6tables` by default
- Feature: Adapt existing firewall code to handle IPv4 and IPv6, depending on user inputs and environment
- Maintenance: improve error wrapping in the firewall package
This commit is contained in:
Quentin McGaw
2021-04-19 09:24:46 -04:00
committed by GitHub
parent d3df5aaa52
commit 7ba98af1cc
5 changed files with 171 additions and 37 deletions
+21
View File
@@ -0,0 +1,21 @@
package firewall
import (
"context"
)
func (c *configurator) runMixedIptablesInstructions(ctx context.Context, instructions []string) error {
for _, instruction := range instructions {
if err := c.runMixedIptablesInstruction(ctx, instruction); err != nil {
return err
}
}
return nil
}
func (c *configurator) runMixedIptablesInstruction(ctx context.Context, instruction string) error {
if err := c.runIptablesInstruction(ctx, instruction); err != nil {
return err
}
return c.runIP6tablesInstruction(ctx, instruction)
}