diff options
Diffstat (limited to 'roles/space_server/files/nftables.conf')
| -rw-r--r-- | roles/space_server/files/nftables.conf | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/space_server/files/nftables.conf b/roles/space_server/files/nftables.conf index a0c17c1..066c03e 100644 --- a/roles/space_server/files/nftables.conf +++ b/roles/space_server/files/nftables.conf @@ -96,6 +96,9 @@ table ip filter { tcp dport 53 ip saddr { $int_net4, $ext_net4 } accept udp dport 53 ip saddr { $int_net4, $ext_net4 } accept + # ntp + udp dport 123 ip saddr { $int_net4, $ext_net4 } accept + # avahi ip daddr 224.0.0.251 udp dport 5353 iif $avahi_ifs accept ip protocol igmp iif $avahi_ifs accept @@ -173,6 +176,9 @@ table ip6 filter { tcp dport 53 ip6 saddr $ext_net6 accept udp dport 53 ip6 saddr $ext_net6 accept + # ntp + udp dport 123 ip6 saddr $ext_net6 accept + # avahi ip6 daddr ff02::fb udp dport 5353 iif $avahi_ifs accept |