AtHeartEngineer/pagesigner-oracles
1
0
Fork 0
mirror of https://github.com/tlsnotary/pagesigner-oracles.git synced 2026-01-08 22:47:57 -05:00
Code Issues Packages Projects Releases Wiki Activity

allow time sync with AWS's NTP

Browse Source
This commit is contained in:
themighty1
2021-12-09 11:37:12 +03:00
parent 292304909f
commit 199bf2e2e1
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
server

Submodule server updated: e49a273b6d...e151f5b321

2
systemd/tlsnotary_setup.sh
View File

@@ -41,6 +41,8 @@ echo root:$pass2 | chpasswd
#using -I to insert rules to the top of the list, i.e. they will appear in iptables in reverse order
#allow only port 10011 and 10012 and localhost
iptables -I INPUT -j DROP
# allow time sync with AWS's NTP listening on link-local address
iptables -I INPUT -s 169.254.169.123 -j ACCEPT
iptables -I INPUT -p tcp --dport 10011 -j ACCEPT
iptables -I INPUT -p tcp --dport 10012 -j ACCEPT
#anti DoS: allow no more than 6 new connections every 40 seconds