verita84/firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix

Browse Source
This commit is contained in:
Your Name 2024-09-28 13:15:52 -06:00
parent 9ee3593c05
commit e9ba6747d6
2 changed files with 11 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
firewall.sh
View File

@ -16,16 +16,15 @@ portConfig["https"]="443"
portConfig["http"]="80" portConfig["http"]="80"
portConfig["cups"]="631" portConfig["cups"]="631"
portConfig["WireGuard"]="57692" portConfig["WireGuard"]="57692"
portConfig["AdGuard-1"]="3000" #portConfig["AdGuard-1"]="3000"
portConfig["AdGuard-2"]="8082" #portConfig["AdGuard-2"]="8082"
portConfig["AdGuard-3"]="853" #portConfig["AdGuard-3"]="853"
portConfig["Uptime"]="4001" #portConfig["Uptime"]="4001"
portConfig["DNS-1"]="53" #portConfig["DNS-1"]="53"
portConfig["DNS-2"]="67" #portConfig["DNS-2"]="67"
portConfig["DNS-3"]="68" #portConfig["DNS-3"]="68"
portConfig["CUPS-1"]="631" portConfig["CUPS-1"]="631"
portConfig["CUPS-2"]="5353" portConfig["CUPS-2"]="5353"
#portConfig["Bitcoin-1"]="8333"
#portConfig["Bitcoin-2"]="8332" #portConfig["Bitcoin-2"]="8332"
#portConfig["Bitcoin-3"]="8333" #portConfig["Bitcoin-3"]="8333"
#portConfig["Bitcoin-4"]="4050" #portConfig["Bitcoin-4"]="4050"
@ -45,7 +44,7 @@ portConfig["SyncThing-3"]="21027"
portConfig["Jellyfin-1"]="8096" portConfig["Jellyfin-1"]="8096"
portConfig["Jellyfin-1"]="7359" portConfig["Jellyfin-1"]="7359"
portConfig["SSH"]="22" portConfig["SSH"]="22"
MACHINES=(127.0.0.1) MACHINES=(192.168.0.55)
VIRT_BRIDGE="virbr0" VIRT_BRIDGE="virbr0"
#### NFT CONFIG #### #### NFT CONFIG ####
# #

9
ipv4-filter.nft
View File

@ -3,8 +3,7 @@ table filter {
chain input { type filter hook input priority 0;policy drop;} chain input { type filter hook input priority 0;policy drop;}
chain forward { type filter hook forward priority 0; chain forward { type filter hook forward priority 0;
iifname wg0 accept; iifname wg0 accept;
iifname home accept; iifname enp11s0 accept;
iifname eno1 accept;
ct status dnat accept; ct status dnat accept;
} }
chain output { type filter hook output priority 0; } chain output { type filter hook output priority 0; }
@ -13,9 +12,7 @@ table filter {
table nat { table nat {
chain prerouting { type nat hook prerouting priority -100; policy accept;} chain prerouting { type nat hook prerouting priority -100; policy accept;}
chain postrouting { type nat hook postrouting priority 100; chain postrouting { type nat hook postrouting priority 100;
iifname wg0 oifname eno1 masquerade; iifname wg0 oifname enp11s0 masquerade;
iifname home oifname eno1 masquerade; iifname enp11s0 oifname wg0 masquerade;
iifname eno1 oifname wg0 masquerade;
iifname eno1 oifname home masquerade;
} }
} }