surshar / claude-code

Claude Code is an agentic coding tool that lives in your terminal, understands your codebase, and helps you code faster by executing routine tasks, explaining complex code, and handling git workflows - all through natural language commands.

Built by Anthropic · github.com/anthropics

add Explicit REJECTBrowse files

Allows for immediate (~20ms) for any blocked call instead of long timeout

Rui Quintino authored on Aug 20, 2025 · GitHub committed on Aug 20, 2025 parent 239aeb5 · commit c58a7da25778

1 changed file+3 -0compared with 239aeb5

M.devcontainer/init-firewall.sh

M.devcontainer/init-firewall.sh+3 -0

		@@ -113,6 +113,9 @@
113	113	# Then allow only specific outbound traffic to allowed domains
114	114	iptables -A OUTPUT -m set --match-set allowed-domains dst -j ACCEPT
115	115
	116	+# Explicitly REJECT all other outbound traffic for immediate feedback
	117	+iptables -A OUTPUT -j REJECT --reject-with icmp-port-unreachable
	118	+
116	119	echo "Firewall configuration complete"
117	120	echo "Verifying firewall rules..."
118	121	if curl --connect-timeout 5 https://example.com >/dev/null 2>&1; then