aboutsummaryrefslogtreecommitdiffstats
path: root/roles/space_server/files
diff options
context:
space:
mode:
Diffstat (limited to 'roles/space_server/files')
-rw-r--r--roles/space_server/files/nftables.conf6
1 files changed, 6 insertions, 0 deletions
diff --git a/roles/space_server/files/nftables.conf b/roles/space_server/files/nftables.conf
index 066c03e..3375826 100644
--- a/roles/space_server/files/nftables.conf
+++ b/roles/space_server/files/nftables.conf
@@ -103,6 +103,9 @@ table ip filter {
ip daddr 224.0.0.251 udp dport 5353 iif $avahi_ifs accept
ip protocol igmp iif $avahi_ifs accept
+ # http cert validation
+ tcp dport 80 ip daddr $ext_ip4 accept
+
## debugging
#iif $ext_if counter drop
#udp dport { 137, 138, 5353, 27036 } drop # NetBIOS, Avahi, Steam in-home stream
@@ -182,6 +185,9 @@ table ip6 filter {
# avahi
ip6 daddr ff02::fb udp dport 5353 iif $avahi_ifs accept
+ # http cert validation
+ tcp dport 80 ip6 daddr $ext_ip6 accept
+
## debugging
#counter log prefix "in6: " drop
drop