Merge pull request #53 from taskcluster/wpt-21529

Drop invalid packets to deal with moby/libnetwork#1090
mozilla-platform-ops · Apr 24, 2020 · 4ef6da8 · 4ef6da8
2 parents 8208beb + 7b41c8c
commit 4ef6da8
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/scripts/ubuntu-bionic/30-networking.sh b/scripts/ubuntu-bionic/30-networking.sh
@@ -0,0 +1,12 @@
+#!/bin/bash
+
+set -exv
+
+# init helpers
+helpers_dir=${MONOPACKER_HELPERS_DIR:-"/etc/monopacker/scripts"}
+. ${helpers_dir}/*.sh
+
+# https://github.com/moby/libnetwork/issues/1090
+retry apt install -y iptables-persistent
+iptables -I INPUT -m conntrack --ctstate INVALID -j DROP
+iptables-save > /etc/iptables/rules.v4