From 4476044c1a03d015de45e587b576857db44042fe Mon Sep 17 00:00:00 2001 From: Kenny Ballou Date: Fri, 14 May 2021 10:44:37 -0600 Subject: firewall: add another http alt port Signed-off-by: Kenny Ballou --- daeva/nftables-rules.nft | 1 + 1 file changed, 1 insertion(+) (limited to 'daeva/nftables-rules.nft') diff --git a/daeva/nftables-rules.nft b/daeva/nftables-rules.nft index 54f9f16..220b0da 100644 --- a/daeva/nftables-rules.nft +++ b/daeva/nftables-rules.nft @@ -11,6 +11,7 @@ table inet filter { udp dport domain ip saddr 172.16.0.0/12 counter accept tcp dport 3000 ip saddr 127.0.0.1/8 counter accept tcp dport 8000 ip saddr 127.0.0.1/8 counter accept + tcp dport 8080 ip saddr { 127.0.0.1/8, 10.0.0.0/8 } counter accept tcp dport 1714-1764 ip saddr 10.0.0.0/8 counter accept comment "KDEConnect" udp dport 1714-1764 ip saddr 10.0.0.0/8 counter accept comment "KDEConnect" tcp dport http-alt ip saddr { 127.0.0.1/8, 10.0.0.0/8 } counter accept -- cgit v1.2.1