Add Bonjour to the firewall

This commit is contained in:
Anthony Rose 2020-08-06 13:07:38 +01:00
parent 9d63a2afea
commit be153002d5

View file

@ -14,8 +14,10 @@ table inet filter {
ct state established,related accept
# Open ports for public services.
tcp dport ssh ct state new accept
tcp dport 8000 ct state new accept # Python HTTP server.
tcp dport 22 ct state new accept # SSH
tcp dport 5353 ct state new accept # Bonjour
udp dport 5353 ct state new accept # Bonjour
tcp dport 8000 ct state new accept # Python HTTP server.
# Accept neighbour discovery otherwise IPv6 connectivity breaks.
ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert } accept