aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorEmil Renner Berthing <esmil@labitat.dk>2020-03-20 18:41:09 +0100
committerEmil Renner Berthing <esmil@labitat.dk>2020-03-20 18:47:00 +0100
commit382c9bd8b976c7e1a25314756a46692dcbb61ea0 (patch)
tree778da29faab3eb5393f13b29caf25b2e1804600f
parenta01a3f1a0b1e62cd3b7c0d7d018e957ea48dc98b (diff)
downloadlabitat-ansible-382c9bd8b976c7e1a25314756a46692dcbb61ea0.tar.gz
labitat-ansible-382c9bd8b976c7e1a25314756a46692dcbb61ea0.tar.xz
labitat-ansible-382c9bd8b976c7e1a25314756a46692dcbb61ea0.zip
space_server: nftables: remove traffic stats rules
This used to open up for polling our old switch for traffic data, but it died and it doesn't work with the new switch so let's plug the hole.
-rw-r--r--roles/space_server/files/nftables.conf4
1 files changed, 0 insertions, 4 deletions
diff --git a/roles/space_server/files/nftables.conf b/roles/space_server/files/nftables.conf
index 9db3fb8..dee82a2 100644
--- a/roles/space_server/files/nftables.conf
+++ b/roles/space_server/files/nftables.conf
@@ -111,9 +111,6 @@ table ip filter {
ct state established,related accept
ct state invalid drop
- # traffic stats
- ip saddr $labitat udp dport 161 counter accept
-
# jumbotron webhook
ip daddr $jumbotron_ip4 tcp dport 17380 counter accept
@@ -198,7 +195,6 @@ table ip6 filter {
table ip nat {
chain portforward {
- ip daddr $ext_ip4 udp dport 161 dnat 10.42.0.9 # traffic stats
ip daddr $ext_ip4 tcp dport 17380 dnat $jumbotron_ip4 # jumbotron webhook
}