aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorMark Nipper <nipsy@bitgnome.net>2026-09-09 13:41:20 -0700
committerMark Nipper <nipsy@bitgnome.net>2026-09-09 13:41:20 -0700
commit49656b38151ae764e3b6d82e2b4e59f8919998bd (patch)
treedc65632a0f2d8289b9c587b91b3e540345609898
parent25227c805bcd6d8a518c325bdefd05b0a078d3cb (diff)
downloadnix-49656b38151ae764e3b6d82e2b4e59f8919998bd.tar
nix-49656b38151ae764e3b6d82e2b4e59f8919998bd.tar.gz
nix-49656b38151ae764e3b6d82e2b4e59f8919998bd.tar.bz2
nix-49656b38151ae764e3b6d82e2b4e59f8919998bd.tar.lz
nix-49656b38151ae764e3b6d82e2b4e59f8919998bd.tar.xz
nix-49656b38151ae764e3b6d82e2b4e59f8919998bd.tar.zst
nix-49656b38151ae764e3b6d82e2b4e59f8919998bd.zip
Add firewall exceptionsHEADmaster
Diffstat (limited to '')
-rw-r--r--hosts/arrakis/default.nix1
1 files changed, 1 insertions, 0 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix
index b7125e8..79a6bf2 100644
--- a/hosts/arrakis/default.nix
+++ b/hosts/arrakis/default.nix
@@ -348,6 +348,7 @@
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.251.128.0/17, 70.252.0.0/14 } counter accept # Trent'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 99.10.64.0/18, 99.11.0.0/16, 99.12.0.0/14, 99.75.128.0/18, 99.16.0.0/12, 99.72.0.0/15, 99.64.0.0/13, 99.75.0.0/17, 99.74.0.0/16, 99.10.128.0/17, 99.32.0.0/11 } counter accept # Jimmy'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 108.192.0.0/10 counter accept # Court'
+ ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 136.32.0.0/11 counter accept # Jimmys friend James'
${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'counter drop'
${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { http, https } counter accept # 80, 443'
${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { netbios-ns, netbios-dgm } counter accept # 137, 138'