[PLUG] awall issue in Alpine 3.12

[Shantanoo]

On Wed, 28-Aug-2024 at 13:28:32 IST, Amey via plug-mail wrote:
> Hello,
> 
> I want to block ICMP traffic but at same time also want to allow
> http,https & ssh traffic in Alpine Linux 3.12 [non docker/k8s
> env/plain vm]
> 
> I tried to create 2 json files and activated the rules.
> ICMP is blocked but then http,https is also blocked.
> If I activate the allow rule first and then activate the deny rule,
> then ICMP is allowed which is strange.
> 
> Any Alpine awall experts here who can help?
> My last resort is to touch iptables directly but trying to check if
> awall can help in anyway.

Can you share the config json files along with the errors and commands for verification?

Sample:


{
  "description": "Allow only HTTP and HTTPS traffic",
  "filter": [
    {
      "in": "inet",
      "out": "inet",
      "action": "accept",
      "proto": "tcp",
      "dport": "80,443"
    },
    {
      "in": "inet",
      "out": "inet",
      "action": "accept",
      "proto": "udp",
      "dport": "443"
    }
  ],
  "default": {
    "in": "inet",
    "out": "inet",
    "action": "drop"
  }
}