summaryrefslogtreecommitdiff
path: root/hosts/vidhar
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2023-03-05 11:25:53 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2023-03-05 11:25:53 +0100
commitca9c2e873a0c1d63d5c4a44508e96911efc4f1b9 (patch)
treec996b7a95f2ac887fdf6a1349458681f710f6f88 /hosts/vidhar
parentef39030d83fb488b16035c82f1f876ed103f541a (diff)
downloadnixos-ca9c2e873a0c1d63d5c4a44508e96911efc4f1b9.tar
nixos-ca9c2e873a0c1d63d5c4a44508e96911efc4f1b9.tar.gz
nixos-ca9c2e873a0c1d63d5c4a44508e96911efc4f1b9.tar.bz2
nixos-ca9c2e873a0c1d63d5c4a44508e96911efc4f1b9.tar.xz
nixos-ca9c2e873a0c1d63d5c4a44508e96911efc4f1b9.zip
...
Diffstat (limited to 'hosts/vidhar')
-rw-r--r--hosts/vidhar/printing/ruleset.nft6
1 files changed, 6 insertions, 0 deletions
diff --git a/hosts/vidhar/printing/ruleset.nft b/hosts/vidhar/printing/ruleset.nft
index e47256c3..f8081431 100644
--- a/hosts/vidhar/printing/ruleset.nft
+++ b/hosts/vidhar/printing/ruleset.nft
@@ -63,6 +63,7 @@ table inet filter {
63 counter icmp-ratelimit-rx {} 63 counter icmp-ratelimit-rx {}
64 counter icmp-rx {} 64 counter icmp-rx {}
65 65
66 counter dhcp-rx {}
66 counter cups-rx {} 67 counter cups-rx {}
67 68
68 counter established-rx {} 69 counter established-rx {}
@@ -80,6 +81,7 @@ table inet filter {
80 counter icmp-tx {} 81 counter icmp-tx {}
81 82
82 counter cups-tx {} 83 counter cups-tx {}
84 counter dhcp-tx {}
83 85
84 counter tx {} 86 counter tx {}
85 87
@@ -131,6 +133,8 @@ table inet filter {
131 ip6 saddr 2a03:4000:52:ada:5:: tcp dport 631 counter name cups-rx accept 133 ip6 saddr 2a03:4000:52:ada:5:: tcp dport 631 counter name cups-rx accept
132 ip saddr 10.141.5.0 tcp dport 631 counter name cups-rx accept 134 ip saddr 10.141.5.0 tcp dport 631 counter name cups-rx accept
133 135
136 iifname printer udp dport 67 counter name dhcp-rx accept
137
134 ct state {established, related} counter name established-rx accept 138 ct state {established, related} counter name established-rx accept
135 139
136 140
@@ -156,6 +160,8 @@ table inet filter {
156 160
157 tcp sport 631 counter name cups-tx accept 161 tcp sport 631 counter name cups-tx accept
158 162
163 udp sport 67 counter name dhcp-tx accept
164
159 165
160 counter name tx 166 counter name tx
161 } 167 }