diff options
| author | tv <tv@krebsco.de> | 2017-08-29 21:08:02 +0200 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2017-08-29 21:08:02 +0200 |
| commit | 247477863628a44c60f591c6df6cc9f5e7818e89 (patch) | |
| tree | 2492ffb4cda34e13d9653fbebbaba8823875d0a9 /lass/2configs/default.nix | |
| parent | fd69096a27575b9d4d87a10af1492b273dad167c (diff) | |
| parent | 48c75276c5a5ed8e7ea33ccb330f8ee6b7a6a927 (diff) | |
Merge remote-tracking branch 'stro/master'
Diffstat (limited to 'lass/2configs/default.nix')
| -rw-r--r-- | lass/2configs/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix index 22a7b1c19..e96f4dc7e 100644 --- a/lass/2configs/default.nix +++ b/lass/2configs/default.nix @@ -200,6 +200,7 @@ with import <stockholm/lib>; filter.INPUT.policy = "DROP"; filter.FORWARD.policy = "DROP"; filter.INPUT.rules = [ + { predicate = "-i retiolum -p udp --dport 60000:61000"; target = "ACCEPT";} { predicate = "-m conntrack --ctstate RELATED,ESTABLISHED"; target = "ACCEPT"; precedence = 10001; } { predicate = "-p icmp"; target = "ACCEPT"; precedence = 10000; } { predicate = "-p ipv6-icmp"; target = "ACCEPT"; v4 = false; precedence = 10000; } |