diff options
| author | lassulus <lassulus@lassul.us> | 2019-05-29 15:25:20 +0200 |
|---|---|---|
| committer | lassulus <lassulus@lassul.us> | 2019-05-29 15:54:12 +0200 |
| commit | 65907391192875d0051f92950516a70919272c26 (patch) | |
| tree | 72329ab4bec4fd03b3300be9b29f32d3872a713b /lass/1systems/prism/config.nix | |
| parent | 418e9f566511af814a4b3bf4c653cca036796a73 (diff) | |
l prism.r: allow nfs mount from retiolum
Diffstat (limited to 'lass/1systems/prism/config.nix')
| -rw-r--r-- | lass/1systems/prism/config.nix | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/lass/1systems/prism/config.nix b/lass/1systems/prism/config.nix index e33d1ca9f..dbbcbc5d1 100644 --- a/lass/1systems/prism/config.nix +++ b/lass/1systems/prism/config.nix @@ -396,6 +396,12 @@ with import <stockholm/lib>; statdPort = 4000; }; krebs.iptables.tables.filter.INPUT.rules = [ + { predicate = "-i retiolum -p tcp --dport 111"; target = "ACCEPT"; } + { predicate = "-i retiolum -p udp --dport 111"; target = "ACCEPT"; } + { predicate = "-i retiolum -p tcp --dport 2049"; target = "ACCEPT"; } + { predicate = "-i retiolum -p udp --dport 2049"; target = "ACCEPT"; } + { predicate = "-i retiolum -p tcp --dport 4000:4002"; target = "ACCEPT"; } + { predicate = "-i retiolum -p udp --dport 4000:4002"; target = "ACCEPT"; } { predicate = "-i wiregrill -p tcp --dport 111"; target = "ACCEPT"; } { predicate = "-i wiregrill -p udp --dport 111"; target = "ACCEPT"; } { predicate = "-i wiregrill -p tcp --dport 2049"; target = "ACCEPT"; } |