Removing forward rules on router for SSH traffic entirely after Sentinel bootstrap...

diff --git a/iotjava/iotruntime/master/RouterConfig.java b/iotjava/iotruntime/master/RouterConfig.java
index e6e0413..48bb8f6 100644 (file)
--- a/iotjava/iotruntime/master/RouterConfig.java
+++ b/iotjava/iotruntime/master/RouterConfig.java
@@ -648,8 +648,8 @@ public final class RouterConfig {
                        strConfigHost + " -d " + strMonitorHost + " -p tcp --dport ssh");
                pwConfig.println("-A OUTPUT -j ACCEPT -s " + 
                        strConfigHost + " -d " + strMonitorHost + " -p tcp --sport ssh");
-               pwConfig.println("-A FORWARD -j ACCEPT -p tcp --dport ssh");
-               pwConfig.println("-A FORWARD -j ACCEPT -p tcp --sport ssh");
+               //pwConfig.println("-A FORWARD -j ACCEPT -p tcp --dport ssh");
+               //pwConfig.println("-A FORWARD -j ACCEPT -p tcp --sport ssh");
 
        }