pbot/applets/pbot-vm/guest/bin/disable-network-iptables

#!/bin/sh
# disables all incoming, outgoing and forwarded traffic except incoming/established SSH
iptables -F
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -P OUTPUT DROP
pbot-vm: massive refactor * replace heartbeat with health-check * instead of steady stream of newlines every 5s, now awaits input and responds with `vmstat` output * more reliably use host/config/vm-exec.json to get libvirt domain name for snapshot-revert, server address, serial ports, vagrant setting, etc * use iptables/nftables to disable networking * added guest/bin/disable-network-[iptables,nftables] * added guest/bin/enable-network-[iptables,nftables] * replace ugly ___OUTPUT___ texts in sh, bash, ksh, zsh languages * documentation updates and tweaks 2024-04-10 10:21:18 +02:00			`#!/bin/sh`
			`# disables all incoming, outgoing and forwarded traffic except incoming/established SSH`
			`iptables -F`
			`iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT`
			`iptables -A INPUT -p tcp --dport 22 -j ACCEPT`
			`iptables -P INPUT DROP`
			`iptables -P FORWARD DROP`
			`iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT`
			`iptables -P OUTPUT DROP`