zentralwerk/network
zentralwerk/network
12
4
Fork 2
Code Issues 5 Pull Requests 1 Releases Wiki Activity

Safeguard against reflect changes

Browse Source
This commit is contained in:
Sandro - 2024-06-23 02:04:34 +02:00
parent 9e67e97dce
commit 77a4e45be4
Signed by: sandro
GPG Key ID: 3AF5A43A3EECC2E5
1 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
config/net/upstream.nix
View File

@ -34,11 +34,15 @@ in
destination = servHosts.public-access-proxy;
proto = "tcp";
sourcePort = 80;
# this is the default but written here explicitly because we do ip based filtering
reflect = false;
}
{ # https
destination = servHosts.public-access-proxy;
proto = "tcp";
sourcePort = 443;
# this is the default but written here explicitly because we do ip based filtering
reflect = false;
}
{ # gemini
destination = "${c3d2-web}:1965";
@ -49,11 +53,15 @@ in
destination = servHosts.knot;
proto = "tcp";
sourcePort = 53;
# this is the default but written here explicitly because we do ip based filtering
reflect = false;
}
{
destination = servHosts.knot;
proto = "udp";
sourcePort = 53;
# this is the default but written here explicitly because we do ip based filtering
reflect = false;
}
{
destination = dn42;