rezo/firewall
30
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Adapt configuration from stallman

Browse source
This commit is contained in:
Thomas Chevalier 2022-05-19 09:45:57 +02:00
parent 1a5ac05e26
commit e91517b95a
2 changed files with 11 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
config/networks/dmz.nft
View file

@ -4,28 +4,20 @@ table inet firewall {
# helper set to quickly add a web server to the whitelist
type ipv4_addr
elements = {
# jarvis (librenms)
193.54.193.11,
# fafnir (passbolt)
193.54.193.23,
# thor (re2o)
193.54.193.25,
# urdarbrunn (wiki)
193.54.193.26,
# loki (contrôleur de bornes)
193.54.193.27,
# brokkr (gitlab)
193.54.193.31,
# verdandi (icinga)
193.54.193.33,
193.54.193.11, # jarvis (librenms)
193.54.193.23, # fafnir (passbolt)
193.54.193.25, # thor (re2o)
193.54.193.26, # urdarbrunn (wiki)
193.54.193.27, # loki (contrôleur de bornes)
193.54.193.31, # brokkr (gitlab)
193.54.193.33, # verdandi (icinga)
}
}
set dmz_whitelist_tcp {
type ipv4_addr . inet_service
elements = {
# frigg (radius)
193.54.193.20 . 1812,
193.54.193.20 . 1812, # frigg (radius)
193.54.193.20 . 1813,
}
}
@ -33,8 +25,7 @@ table inet firewall {
set dmz_whitelist_udp {
type ipv4_addr . inet_service
elements = {
# frigg (radius)
193.54.193.20 . 1812,
193.54.193.20 . 1812, # frigg (radius)
193.54.193.20 . 1813,
}
}

4
config/networks/nerim.nft
View file

@ -10,7 +10,7 @@ table inet firewall {
chain fwd_yann_minecraft{
# Serveur minecraft Yann
dnat to 10.2.4.29:23456
ip version 4 ip protocol tcp dnat to 10.2.4.29:23456
}
chain fwd_fabien_pathier{
@ -31,6 +31,6 @@ table inet firewall {
}
chain snat_nerim {
masquerade log prefix "masquerade:"
log prefix "masquerade:" masquerade
}
}