summaryrefslogtreecommitdiff
path: root/hosts/surtr/ruleset.nft
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/surtr/ruleset.nft')
-rw-r--r--hosts/surtr/ruleset.nft4
1 files changed, 1 insertions, 3 deletions
diff --git a/hosts/surtr/ruleset.nft b/hosts/surtr/ruleset.nft
index ee72614f..4993b6b7 100644
--- a/hosts/surtr/ruleset.nft
+++ b/hosts/surtr/ruleset.nft
@@ -171,7 +171,6 @@ table inet filter {
171 udp dport 53 counter name dns-rx accept 171 udp dport 53 counter name dns-rx accept
172 172
173 tcp dport {80, 443, 8448} counter name http-rx accept 173 tcp dport {80, 443, 8448} counter name http-rx accept
174 udp dport {443, 8448} counter name http-rx accept
175 174
176 tcp dport {3478, 5349} counter name stun-rx accept 175 tcp dport {3478, 5349} counter name stun-rx accept
177 udp dport {3478, 5349} counter name stun-rx accept 176 udp dport {3478, 5349} counter name stun-rx accept
@@ -216,8 +215,7 @@ table inet filter {
216 meta protocol ip6 udp sport {51821, 51822} counter name wg-tx 215 meta protocol ip6 udp sport {51821, 51822} counter name wg-tx
217 iifname "yggdrasil-wg-*" meta l4proto gre counter name yggdrasil-gre-tx 216 iifname "yggdrasil-wg-*" meta l4proto gre counter name yggdrasil-gre-tx
218 217
219 tcp sport {80, 443, 8448} counter name http-tx accept 218 tcp sport {80,443,8448} counter name http-tx accept
220 udp sport {443, 8448} counter name http-tx accept
221 219
222 tcp sport {3478, 5349} counter name stun-tx accept 220 tcp sport {3478, 5349} counter name stun-tx accept
223 udp sport {3478, 5349} counter name stun-tx accept 221 udp sport {3478, 5349} counter name stun-tx accept