Allowing outbound traffic with APF/iptables for OpenVZ container
- by David
I have apf installed on a OpenVZ container (proxmox 2.1). The config is pretty much vanilla and things are working. My external services like ssh and http are working. My problem is that all outbound traffic on http/https is blocked. How do I allow all outbound traffic for http/https.
If I change EGF to 1 like this, all inbound and outbound traffic gets blocked
EGF="1"
EG_TCP_CPORTS="21,25,80,443,43,53"
EG_UDP_CPORTS="20,21,53"
EG_ICMP_TYPES="all"
I opened a single outbound rule with the following
# /usr/local/sbin/apf -a downloads.wordpress.org
How do I allow all outbound traffic on http/https without blocking all traffic?
Why would I allow all inbound ssh/http traffic and block all outbound traffic?