resolv-dns: add firewall config for exposing metrics to monitoring host

This commit is contained in:
June 2025-04-18 16:33:20 +02:00
commit 973e22e267
Signed by: june
SSH key fingerprint: SHA256:o9EAq4Y9N9K0pBQeBTqhSDrND5E7oB+60ZNx0U1yPe0

View file

@ -15,6 +15,8 @@ table inet filter {
tcp dport 22 accept
tcp dport 53 accept
udp dport 53 accept
tcp dport 9167 ip saddr 94.45.254.5 accept comment "allow monitoring access to unbound exporter stats"
}
chain forward {
type filter hook forward priority filter; policy drop;