resolv-dns: add firewall config for exposing metrics to monitoring host

This commit is contained in:
June 2025-04-18 16:33:20 +02:00
commit 973e22e267
Signed by: june
SSH key fingerprint: SHA256:o9EAq4Y9N9K0pBQeBTqhSDrND5E7oB+60ZNx0U1yPe0

View file

@ -15,6 +15,8 @@ table inet filter {
tcp dport 22 accept tcp dport 22 accept
tcp dport 53 accept tcp dport 53 accept
udp dport 53 accept udp dport 53 accept
tcp dport 9167 ip saddr 94.45.254.5 accept comment "allow monitoring access to unbound exporter stats"
} }
chain forward { chain forward {
type filter hook forward priority filter; policy drop; type filter hook forward priority filter; policy drop;