ant/workstation
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add Bonjour to the firewall

Browse source
This commit is contained in:
Anthony Rose 2020-08-06 13:07:38 +01:00
parent 9d63a2afea
commit be153002d5
1 changed files with 4 additions and 2 deletions

6
roles/debian/files/nftables.conf
View file

@ -14,8 +14,10 @@ table inet filter {
ct state established,related accept ct state established,related accept
# Open ports for public services. # Open ports for public services.
tcp dport ssh ct state new accept tcp dport 22 ct state new accept # SSH
tcp dport 8000 ct state new accept # Python HTTP server. tcp dport 5353 ct state new accept # Bonjour
udp dport 5353 ct state new accept # Bonjour
tcp dport 8000 ct state new accept # Python HTTP server.
# Accept neighbour discovery otherwise IPv6 connectivity breaks. # Accept neighbour discovery otherwise IPv6 connectivity breaks.
ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert } accept ip6 nexthdr icmpv6 icmpv6 type { nd-neighbor-solicit, nd-router-advert, nd-neighbor-advert } accept