Skip to content

Conversation

@8enmann
Copy link
Collaborator

@8enmann 8enmann commented Mar 11, 2025

Summary

  • Add network firewall that restricts outbound connections to GitHub, npm, and Anthropic API
  • Provides firewall script but requires explicit activation in devcontainer.json

Key Changes

  • Firewall must be manually activated using container capabilities and post-create command
  • See instructions when feature is installed for activation steps

Test plan

  • Test on Ubuntu base image with firewall manually activated
  • Verify connections to essential services work and others are blocked

🤖 Generated with Claude Code

8enmann and others added 5 commits March 10, 2025 23:31
- Add configurable network firewall that restricts outbound connections
- Refactor install.sh to use functions for better organization
- Create init-firewall.sh script to set up iptables and ipset rules
- Enable firewall configuration through feature option
- Add documentation in NOTES.md for the firewall feature
- Create test scenario for validating firewall functionality
- Update version to 1.0.5

🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <[email protected]>
- Remove enableFirewall option from feature configuration
- Always install firewall packages and copy init script
- Update documentation to explain manual firewall activation
- Update test scenarios and scripts for new approach
- Add more details about how the firewall works

🤖 Generated with [Claude Code](https://claude.ai/code)
Co-Authored-By: Claude <[email protected]>
@8enmann 8enmann force-pushed the add-firewall-feature branch 2 times, most recently from b15051a to 554e6fa Compare March 11, 2025 07:52
@8enmann 8enmann requested review from a team and igorkofman March 11, 2025 07:53
@8enmann 8enmann merged commit 8adc9f2 into main Mar 11, 2025
6 checks passed
@8enmann 8enmann deleted the add-firewall-feature branch March 11, 2025 21:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants