From a95931f48d45f23413c85bfbbd6dbdc6f127114e Mon Sep 17 00:00:00 2001 From: Mark Nipper Date: Sun, 13 Sep 2026 15:42:50 -0700 Subject: Add firewall exceptions --- hosts/arrakis/default.nix | 1 + 1 file changed, 1 insertion(+) (limited to 'hosts/arrakis/default.nix') diff --git a/hosts/arrakis/default.nix b/hosts/arrakis/default.nix index 79a6bf2..a95e899 100644 --- a/hosts/arrakis/default.nix +++ b/hosts/arrakis/default.nix @@ -345,6 +345,7 @@ "nftables-extra" = let rules_script = '' ${pkgs.nftables}/bin/nft create chain inet nixos-fw games || ${pkgs.nftables}/bin/nft flush chain inet nixos-fw games ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 192.168.1.0/24 counter accept' + ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.109.192.0/18, 70.110.0.0/15 } counter accept # Kyle' ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 70.251.128.0/17, 70.252.0.0/14 } counter accept # Trent' ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr { 99.10.64.0/18, 99.11.0.0/16, 99.12.0.0/14, 99.75.128.0/18, 99.16.0.0/12, 99.72.0.0/15, 99.64.0.0/13, 99.75.0.0/17, 99.74.0.0/16, 99.10.128.0/17, 99.32.0.0/11 } counter accept # Jimmy' ${pkgs.nftables}/bin/nft add rule inet nixos-fw games 'ip saddr 108.192.0.0/10 counter accept # Court' -- cgit v1.3.1