Cloonar/nixos
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

allow podman0 network

Browse source
This commit is contained in:
Dominik Polakovics Polakovics 2023-12-01 20:46:21 +01:00
parent d407f35d5d
commit 26beae17a9
1 changed files with 4 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
hosts/fw.cloonar.com/modules/firewall.nix
View file

@ -10,17 +10,21 @@
iptables -A INPUT -i wg_cloonar -j ACCEPT iptables -A INPUT -i wg_cloonar -j ACCEPT
iptables -A INPUT -p udp -i smart -m multiport --dports 53,67,68 -j ACCEPT iptables -A INPUT -p udp -i smart -m multiport --dports 53,67,68 -j ACCEPT
iptables -A INPUT -p udp -i multimedia -m multiport --dports 53,67,68 -j ACCEPT iptables -A INPUT -p udp -i multimedia -m multiport --dports 53,67,68 -j ACCEPT
iptables -A INPUT -p udp -i podman0 -m multiport --dports 53,67,68 -j ACCEPT
iptables -A INPUT -p tcp -i smart -m multiport --dports 80,443,453 -j ACCEPT iptables -A INPUT -p tcp -i smart -m multiport --dports 80,443,453 -j ACCEPT
iptables -A INPUT -p tcp -i multimedia -m multiport --dports 80,443,453 -j ACCEPT iptables -A INPUT -p tcp -i multimedia -m multiport --dports 80,443,453 -j ACCEPT
iptables -A INPUT -p tcp -i podman0 -m multiport --dports 80,443,453 -j ACCEPT
iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT
iptables -A FORWARD -i wan -d 10.42.0.0/16 -j ACCEPT iptables -A FORWARD -i wan -d 10.42.0.0/16 -j ACCEPT
iptables -A FORWARD -i lan -d 10.42.0.0/16 -j ACCEPT iptables -A FORWARD -i lan -d 10.42.0.0/16 -j ACCEPT
iptables -A FORWARD -i podman0 -d 10.42.0.0/16 -j ACCEPT
iptables -A FORWARD -i wg_cloonar -d 10.42.0.0/16 -j ACCEPT iptables -A FORWARD -i wg_cloonar -d 10.42.0.0/16 -j ACCEPT
iptables -A FORWARD -i lan -o wan -j ACCEPT iptables -A FORWARD -i lan -o wan -j ACCEPT
iptables -A FORWARD -i server -o wan -j ACCEPT iptables -A FORWARD -i server -o wan -j ACCEPT
iptables -A FORWARD -i podman0 -o wan -j ACCEPT
iptables -A FORWARD -i server-shim -o wan -j ACCEPT iptables -A FORWARD -i server-shim -o wan -j ACCEPT
iptables -A FORWARD -i multimedia -o wan -j ACCEPT iptables -A FORWARD -i multimedia -o wan -j ACCEPT
iptables -A FORWARD -i smart -o wan -j ACCEPT iptables -A FORWARD -i smart -o wan -j ACCEPT