diff options
| author | Mark Nipper <nipsy@bitgnome.net> | 2026-09-09 12:42:59 -0700 |
|---|---|---|
| committer | Mark Nipper <nipsy@bitgnome.net> | 2026-09-09 12:42:59 -0700 |
| commit | 25227c805bcd6d8a518c325bdefd05b0a078d3cb (patch) | |
| tree | 487484709fd33c1d766b761a08c3060f1e931b40 /hosts/arrakis/default.nix | |
| parent | 7c6dbf23a860824d7ece9d24215a81dc98512b06 (diff) | |
| download | nix-25227c805bcd6d8a518c325bdefd05b0a078d3cb.tar nix-25227c805bcd6d8a518c325bdefd05b0a078d3cb.tar.gz nix-25227c805bcd6d8a518c325bdefd05b0a078d3cb.tar.bz2 nix-25227c805bcd6d8a518c325bdefd05b0a078d3cb.tar.lz nix-25227c805bcd6d8a518c325bdefd05b0a078d3cb.tar.xz nix-25227c805bcd6d8a518c325bdefd05b0a078d3cb.tar.zst nix-25227c805bcd6d8a518c325bdefd05b0a078d3cb.zip | |
Add firewall exceptions
Diffstat (limited to 'hosts/arrakis/default.nix')
| -rw-r--r-- | hosts/arrakis/default.nix | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index 045b4a3..b7125e8 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -346,6 +346,8 @@ ${pkgs.nftables}/bin/nft create chain inet nixos-fw games || ${pkgs.nftables}/bin/nft flush chain inet nixos-fw games ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 192.168.1.0/24 counter accept' ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.251.128.0/17, 70.252.0.0/14 } counter accept # Trent' + ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 99.10.64.0/18, 99.11.0.0/16, 99.12.0.0/14, 99.75.128.0/18, 99.16.0.0/12, 99.72.0.0/15, 99.64.0.0/13, 99.75.0.0/17, 99.74.0.0/16, 99.10.128.0/17, 99.32.0.0/11 } counter accept # Jimmy' + ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 108.192.0.0/10 counter accept # Court' ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'counter drop' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" tcp dport { http, https } counter accept # 80, 443' ${pkgs.nftables}/bin/nft insert rule inet nixos-fw input 'iifname "enp6s0" udp dport { netbios-ns, netbios-dgm } counter accept # 137, 138' |