mirrors/mdlayher-homelab
1
0
Fork 0
mirror of https://github.com/mdlayher/homelab.git synced 2024-12-14 11:47:32 +00:00
Code Activity

nixos/routnerr-3: nftables tweaks

Browse source
This commit is contained in:
Matt Layher 2023-08-15 23:26:53 -04:00
parent 53f65c3cf7
commit 558db6e4bc
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
nixos/routnerr-3/nftables.nix
View file

@ -15,6 +15,7 @@ let
mdns = "5353";
plex = "32400";
ssh = "22";
tailscale = "41461";
wireguard = "51820";
};
@ -41,6 +42,7 @@ let
icmp_rules = ''
ip6 nexthdr icmpv6 icmpv6 type {
echo-request,
echo-reply,
destination-unreachable,
packet-too-big,
time-exceeded,
@ -51,6 +53,7 @@ let
ip protocol icmp icmp type {
echo-request,
echo-reply,
destination-unreachable,
time-exceeded,
parameter-problem,
@ -116,6 +119,7 @@ in {
# router UDP
udp dport {
${ports.tailscale},
${ports.wireguard},
} counter accept comment "router WAN UDP"