Cloonar/nixos
2
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

allow traffic to dns from everywhere

Browse Source
This commit is contained in:
Dominik Polakovics Polakovics
2023-12-06 20:10:32 +01:00
parent 783e0840c9
commit 47cdc1d854
2 changed files with 2 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
.gitea/workflows/default.yaml Normal file
View File

13
hosts/fw.cloonar.com/modules/firewall.nix
View File

@@ -140,17 +140,7 @@
"wg_cloonar",
"smart",
"multimedia"
} udp dport { 53, 67, 68 } counter accept
iifname {
"lan",
"server",
"vserver",
"vb-*",
"infrastructure",
"wg_cloonar",
"smart",
"multimedia"
} tcp dport { 80, 443, 853 } counter accept
} udp dport { 67, 68 } counter accept
# Accept mDNS for avahi reflection
# iifname "multimedia" ip saddr <chromecast IP> tcp dport { llmnr } counter accept
@@ -192,6 +182,7 @@
# lan and vpn to any
# TODO: disable wan when finished
oifname { "server" } ip daddr 10.42.97.10 udp dport { 53 } accept
iifname { "lan", "server", "vserver", "wg_cloonar" } oifname { "lan", "vb-*", "server", "vserver", "infrastructure", "multimedia", "smart", "wg_cloonar" } counter accept
iifname { "lan", "server", "wg_cloonar" } oifname { "wrwks", "wg_epicenter", "wg_ghetto_at" } counter accept
iifname { "infrastructure" } oifname { "server", "vserver" } counter accept