Bastille Firewall's Missing Interface "bond+" in ISPConfig 3.0.2

posted by Jordan Peterson on Wed, 04/28/2010 - 10:26

Ispconfig 3.0.2 and lesser 3 versions came with Bastille Firewall; a configurable firewall from within the ISPConfig control panel. However, I use a bonded interface like bond0, bond0:0 bond0:1, etc. The bond+ interface is missing from the typical bastille configuration file and thus locks out access because bond+ interfaces aren't known for public interfaces:

nano /etc/Bastille/bastille-firewall.cfg

Line to edit:

PUBLIC_IFACES="eth+ ppp+ slip+ venet+ bond+"

Every time a new version of ISPConfig 3+ comes out, this file is overwritten and the Bastille Firewall reverts to a file missing the "bond+" interface, thus locking out access to the server on all protocols.

I caught wind of a fix and have made the changes to a template file here that should be read from every time ISPConfig is update, therefore not losing the bond+ interface:

Make changes to this file like in the above file. Changes to this file should set the template for future updates:

nano /usr/local/ispconfig/server/conf/bastille-firewall.cfg.master