Reject packets to private IP ranges instead of dropping them. (#7246)

buildbuddy-io · Aug 14, 2024 · 535fc19 · 535fc19
1 parent 211d3a5
commit 535fc19
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/server/util/networking/networking.go b/server/util/networking/networking.go
@@ -704,7 +704,7 @@ func routingTableContainsTable(tableEntry string) (bool, error) {
 
 func ConfigurePrivateRangeBlackholing(ctx context.Context, sourceRange string) error {
 	for _, r := range PrivateIPRanges {
-		if err := runCommand(ctx, "iptables", "--wait", "-I", "FORWARD", "-s", sourceRange, "-d", r, "-j", "DROP"); err != nil {
+		if err := runCommand(ctx, "iptables", "--wait", "-I", "FORWARD", "-s", sourceRange, "-d", r, "-j", "REJECT"); err != nil {
 			return err
 		}
 	}