diff options
| author | makefu <github@syntax-fehler.de> | 2017-09-04 09:05:06 +0200 |
|---|---|---|
| committer | makefu <github@syntax-fehler.de> | 2017-09-04 09:05:06 +0200 |
| commit | 729549d15464e57e41fd143450c36274cedc84fa (patch) | |
| tree | c28cfa3576c601f7f665cebc7721ef3a08311792 /lass/2configs/default.nix | |
| parent | 848acb85ccecbe25987bf6da45a96fc4eaaa74e9 (diff) | |
| parent | fcf59a00e2ab675cb171cbe4f21b8df73836d144 (diff) | |
Merge remote-tracking branch 'lass/master'
Diffstat (limited to 'lass/2configs/default.nix')
| -rw-r--r-- | lass/2configs/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix index 22a7b1c19..e96f4dc7e 100644 --- a/lass/2configs/default.nix +++ b/lass/2configs/default.nix @@ -200,6 +200,7 @@ with import <stockholm/lib>; filter.INPUT.policy = "DROP"; filter.FORWARD.policy = "DROP"; filter.INPUT.rules = [ + { predicate = "-i retiolum -p udp --dport 60000:61000"; target = "ACCEPT";} { predicate = "-m conntrack --ctstate RELATED,ESTABLISHED"; target = "ACCEPT"; precedence = 10001; } { predicate = "-p icmp"; target = "ACCEPT"; precedence = 10000; } { predicate = "-p ipv6-icmp"; target = "ACCEPT"; v4 = false; precedence = 10000; } |