diff --git a/chef/cookbooks/metasploitable/recipes/iptables.rb b/chef/cookbooks/metasploitable/recipes/iptables.rb index 24ecf80..83c0c78 100644 --- a/chef/cookbooks/metasploitable/recipes/iptables.rb +++ b/chef/cookbooks/metasploitable/recipes/iptables.rb @@ -10,6 +10,14 @@ iptables_rule '00_established' do lines '-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT' end +iptables_rule '00_lo_allow_in' do + lines '-I INPUT -i lo -j ACCEPT' +end + +iptables_rule '00_lo_allow_out' do + lines '-I OUTPUT -o lo -j ACCEPT' +end + iptables_rule '01_ssh' do lines "-A INPUT -p tcp --dport 22 -j ACCEPT" end @@ -21,6 +29,3 @@ end iptables_rule '999_drop_all' do lines '-A INPUT -j DROP' end - - -