security_Firewall: Drop NFQUEUE rules
These are no longer used on ARC++ systems.
BUG=b:29551145
TEST=`test_that -b kevin <IP> security_Firewall`
Change-Id: I76bc307b3829d3abfb2840462d734059b3e02169
Reviewed-on: https://chromium-review.googlesource.com/427261
Commit-Ready: Kevin Cernekee <cernekee@chromium.org>
Tested-by: Kevin Cernekee <cernekee@chromium.org>
Reviewed-by: Luigi Semenzato <semenzato@chromium.org>
diff --git a/client/site_tests/security_Firewall/baseline.iptables b/client/site_tests/security_Firewall/baseline.iptables
index be1546c..7f558c5 100644
--- a/client/site_tests/security_Firewall/baseline.iptables
+++ b/client/site_tests/security_Firewall/baseline.iptables
@@ -4,9 +4,7 @@
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -i lo -j ACCEPT
-A INPUT -p icmp -j ACCEPT
--A INPUT -p udp -j NFQUEUE --queue-num 10000
-A INPUT -p tcp -m tcp --dport 22 -j ACCEPT
-A INPUT -d 224.0.0.251/32 -p udp -m udp --dport 5353 -j ACCEPT
--A OUTPUT -d 239.255.255.250/32 -p udp -m udp --dport 1900 -j NFQUEUE --queue-num 10001
-A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -o lo -j ACCEPT