diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2021-12-14 09:13:33 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2021-12-14 09:13:33 +0100 |
| commit | 111d4765d2a3cd55f7eaaf6e011f6d09b8395afb (patch) | |
| tree | 067acf8b312acdf704f2578592098b98cd8801b0 /hosts/vidhar | |
| parent | 200b266d03961861069defeef963ac6501ff77f7 (diff) | |
| download | nixos-111d4765d2a3cd55f7eaaf6e011f6d09b8395afb.tar nixos-111d4765d2a3cd55f7eaaf6e011f6d09b8395afb.tar.gz nixos-111d4765d2a3cd55f7eaaf6e011f6d09b8395afb.tar.bz2 nixos-111d4765d2a3cd55f7eaaf6e011f6d09b8395afb.tar.xz nixos-111d4765d2a3cd55f7eaaf6e011f6d09b8395afb.zip | |
nftables: ...
Diffstat (limited to 'hosts/vidhar')
| -rw-r--r-- | hosts/vidhar/ruleset.nft | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft index b9c672bc..d1689fd6 100644 --- a/hosts/vidhar/ruleset.nft +++ b/hosts/vidhar/ruleset.nft | |||
| @@ -89,9 +89,11 @@ table inet filter { | |||
| 89 | meta l4proto $icmp_protos counter accept | 89 | meta l4proto $icmp_protos counter accept |
| 90 | 90 | ||
| 91 | tcp dport 22 counter accept | 91 | tcp dport 22 counter accept |
| 92 | meta protocol ip udp dport 51820 counter accept | ||
| 93 | udp dport 60001-61000 counter accept | 92 | udp dport 60001-61000 counter accept |
| 94 | 93 | ||
| 94 | meta protocol ip udp dport 51820 counter accept | ||
| 95 | iifname "yggdrasil-wg-*" meta l4proto gre counter accept | ||
| 96 | |||
| 95 | iifname dsl meta protocol ip6 udp dport 546 udp sport 547 counter accept | 97 | iifname dsl meta protocol ip6 udp dport 546 udp sport 547 counter accept |
| 96 | 98 | ||
| 97 | ct state {established, related} counter accept | 99 | ct state {established, related} counter accept |