d8952ed26f
* Disabled gputest
* The package is failing to install.
* Now using Midori GTK3 build
* GTK2 was pulled from main repos for security reasons
* Removed warnings about missing UFD
* For use with live sessions
* Wallpaper updated for live sessions
* Wallpaper is now set at startup
* Checks for UFD source but defaults to included file
* Bugfix: Wallpaper is now set for multiple monitor/workspace setups
* Disabled choose-mirror service
* Better permission handling
* build-wk now checks if running as root
* build-wk now sets permissions before calling build.sh
* Should prevent build failues as build.sh expects files to be owned by root
* build-wk sets ownership back to builduser.builduser during cleanup
* Better menu for HW-Diags
* The script now returns to the menu after running a selection
* Unless the mode was set directly by passing a valid argument
* NOTE: This allows for easier use in CLI mode
* Add delay before removing /media/wktech
* Adjusted TMP_DIR in build-wk
* Fixed path to custom repo
* Trimming the fat
* hostname / hosts now configured by customize_airootfs.sh
* removed files from etc that were at default settings
* removed grml zsh config since oh-my-zsh/lean is used
* Defined a LOG_DIR for build-wk
* Introducing libinput
* Switched to libinput over synaptics as it has been deprecated.
* Should restore touchpad functionality going forward.
* Full mount path SHOULD now be displayed for mount-all-volumes.
* Added CLI Screensavers
* diag-network works now
* network connection tests now passes all ipv4 private ip ranges
* 10.0.0.0/8, 172.16.0.0/12, & 192.168.0.0/24
* need to add ipv6 at some point
* hw-diag menu flow adjusted
* New hostname and more bugfixes
* hostname switched to wk-arch
* ufw package is now installed
* adjusted upload section of hw-diags
* Added alias for start-wifi
* Booting to CLI mode will autologin wktech
* When booting to the CLI the motd shows some avail commands
* Adjusted HW-Diags menu for use in CLI mode
45 lines
1.7 KiB
Text
45 lines
1.7 KiB
Text
# /etc/default/ufw
|
|
#
|
|
|
|
# Set to yes to apply rules to support IPv6 (no means only IPv6 on loopback
|
|
# accepted). You will need to 'disable' and then 'enable' the firewall for
|
|
# the changes to take affect.
|
|
IPV6=yes
|
|
|
|
# Set the default input policy to ACCEPT, DROP, or REJECT. Please note that if
|
|
# you change this you will most likely want to adjust your rules.
|
|
DEFAULT_INPUT_POLICY="DROP"
|
|
|
|
# Set the default output policy to ACCEPT, DROP, or REJECT. Please note that if
|
|
# you change this you will most likely want to adjust your rules.
|
|
DEFAULT_OUTPUT_POLICY="ACCEPT"
|
|
|
|
# Set the default forward policy to ACCEPT, DROP or REJECT. Please note that
|
|
# if you change this you will most likely want to adjust your rules
|
|
DEFAULT_FORWARD_POLICY="DROP"
|
|
|
|
# Set the default application policy to ACCEPT, DROP, REJECT or SKIP. Please
|
|
# note that setting this to ACCEPT may be a security risk. See 'man ufw' for
|
|
# details
|
|
DEFAULT_APPLICATION_POLICY="SKIP"
|
|
|
|
# By default, ufw only touches its own chains. Set this to 'yes' to have ufw
|
|
# manage the built-in chains too. Warning: setting this to 'yes' will break
|
|
# non-ufw managed firewall rules
|
|
MANAGE_BUILTINS=no
|
|
|
|
#
|
|
# IPT backend
|
|
#
|
|
# only enable if using iptables backend
|
|
IPT_SYSCTL=/etc/ufw/sysctl.conf
|
|
|
|
# Extra connection tracking modules to load. Complete list can be found in
|
|
# net/netfilter/Kconfig of your kernel source. Some common modules:
|
|
# nf_conntrack_irc, nf_nat_irc: DCC (Direct Client to Client) support
|
|
# nf_conntrack_netbios_ns: NetBIOS (samba) client support
|
|
# nf_conntrack_pptp, nf_nat_pptp: PPTP over stateful firewall/NAT
|
|
# nf_conntrack_ftp, nf_nat_ftp: active FTP support
|
|
# nf_conntrack_tftp, nf_nat_tftp: TFTP support (server side)
|
|
IPT_MODULES="nf_conntrack_ftp nf_nat_ftp nf_conntrack_netbios_ns"
|
|
|