summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorPatrick Spek <p.spek@tyil.nl>2024-02-28 19:17:06 +0100
committerPatrick Spek <p.spek@tyil.nl>2024-02-28 19:17:06 +0100
commita104b6b032c2e6816f6ad8e3cbc460d1342a08d9 (patch)
treee27d32de5e0b3f2e059c719999474cf46b28d809
parent8b86ca6a4cbf146d3ed743503b9d985abb1c3777 (diff)
Add nftables rule for tinc
-rw-r--r--defaults9
1 files changed, 6 insertions, 3 deletions
diff --git a/defaults b/defaults
index 6145aab..bbba50e 100644
--- a/defaults
+++ b/defaults
@@ -17,12 +17,15 @@ nftables.input.interfaces.lo.policy=accept
nftables.input.interfaces.tyilnet.policy=accept
nftables.input.interfaces.tyilnet1058.policy=accept
nftables.input.policy=drop
-nftables.input.rules.ssh.policy=accept
-nftables.input.rules.ssh.port=22
-nftables.input.rules.ssh.proto=tcp
nftables.input.rules.mosh.policy=accept
nftables.input.rules.mosh.port=60000-61000
nftables.input.rules.mosh.proto=udp
+nftables.input.rules.ssh.policy=accept
+nftables.input.rules.ssh.port=22
+nftables.input.rules.ssh.proto=tcp
+nftables.input.rules.tincd.policy=accept
+nftables.input.rules.tincd.port=655
+nftables.input.rules.tincd.proto=tcp,udp
nftables.input.rules.wireguard.policy=accept
nftables.input.rules.wireguard.port=51820
nftables.input.rules.wireguard.proto=udp