sophia/ansible-infra
0
0
Fork 0
forked from CCCHH/ansible-infra
Code Pull requests Activity

z9-router(host): fix nftables

Browse source
This commit is contained in:
bitwhisker 2026-08-07 23:36:56 +02:00
commit 3ab9f83039
Signed by: bitwhisker
SSH key fingerprint: SHA256:KybIk/tusSKao6eLGY+ILlFa1rCrzwx66/acBAcKUqE
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
resources/z9/z9-router/nftables/nftables.conf
View file

@ -78,7 +78,7 @@ table inet host {
iifname { $lan_ifs } udp dport 547 accept comment "allow dhcpv6 server access" iifname { $lan_ifs } udp dport 547 accept comment "allow dhcpv6 server access"
# Allow DNS server access from lan_ifs # Allow DNS server access from lan_ifs
iifname { $lan_ifs, $if_wg56_management } meta l4proto { tcp, udp } dport 53 accept comment "allow dns server access from lan_ifs" iifname { $lan_ifs, $if_wg56_management } meta l4proto { tcp, udp } th dport 53 accept comment "allow dns server access from lan_ifs"
} }
} }