diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2016-04-17 15:41:26 +0200 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2016-04-17 15:41:26 +0200 |
| commit | 59101497d9793bc8f9012b0730a48b66b1704f0b (patch) | |
| tree | 928f76f914fbebe2b3df58d33c562054365accc2 | |
| parent | c80d56bedc36db955fd009d058dd419422fb7aa7 (diff) | |
| download | nixos-59101497d9793bc8f9012b0730a48b66b1704f0b.tar nixos-59101497d9793bc8f9012b0730a48b66b1704f0b.tar.gz nixos-59101497d9793bc8f9012b0730a48b66b1704f0b.tar.bz2 nixos-59101497d9793bc8f9012b0730a48b66b1704f0b.tar.xz nixos-59101497d9793bc8f9012b0730a48b66b1704f0b.zip | |
more lenient firewall
| -rw-r--r-- | bragi.nix | 3 |
1 files changed, 2 insertions, 1 deletions
| @@ -196,7 +196,8 @@ in rec { | |||
| 196 | ]; | 196 | ]; |
| 197 | extraCommands = '' | 197 | extraCommands = '' |
| 198 | iptables -t nat -A POSTROUTING -o wlp4s0 -j MASQUERADE | 198 | iptables -t nat -A POSTROUTING -o wlp4s0 -j MASQUERADE |
| 199 | iptables -A FORWARD -i wlp4s0 -o enp1s0 -m state --state RELATED,ESTABLISHED -j ACCEPT | 199 | #iptables -A FORWARD -i wlp4s0 -o enp1s0 -m state --state RELATED,ESTABLISHED -j ACCEPT |
| 200 | iptables -A FORWARD -i wlp4s0 -o enp1s0 -j ACCEPT | ||
| 200 | iptables -A FORWARD -i enp1s0 -o wlp4s0 -j ACCEPT | 201 | iptables -A FORWARD -i enp1s0 -o wlp4s0 -j ACCEPT |
| 201 | ''; | 202 | ''; |
| 202 | }; | 203 | }; |
