From a104b6b032c2e6816f6ad8e3cbc460d1342a08d9 Mon Sep 17 00:00:00 2001 From: Patrick Spek Date: Wed, 28 Feb 2024 19:17:06 +0100 Subject: Add nftables rule for tinc --- defaults | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/defaults b/defaults index 6145aab..bbba50e 100644 --- a/defaults +++ b/defaults @@ -17,12 +17,15 @@ nftables.input.interfaces.lo.policy=accept nftables.input.interfaces.tyilnet.policy=accept nftables.input.interfaces.tyilnet1058.policy=accept nftables.input.policy=drop -nftables.input.rules.ssh.policy=accept -nftables.input.rules.ssh.port=22 -nftables.input.rules.ssh.proto=tcp nftables.input.rules.mosh.policy=accept nftables.input.rules.mosh.port=60000-61000 nftables.input.rules.mosh.proto=udp +nftables.input.rules.ssh.policy=accept +nftables.input.rules.ssh.port=22 +nftables.input.rules.ssh.proto=tcp +nftables.input.rules.tincd.policy=accept +nftables.input.rules.tincd.port=655 +nftables.input.rules.tincd.proto=tcp,udp nftables.input.rules.wireguard.policy=accept nftables.input.rules.wireguard.port=51820 nftables.input.rules.wireguard.proto=udp -- cgit v1.1