Firewall: Difference between revisions
m →Temporary firewall rules: Remove statement that nixos-firewall-tool only works with iptables |
m fix indentation |
||
| Line 6: | Line 6: | ||
{{file|/etc/nixos/configuration.nix|nix|<nowiki> | {{file|/etc/nixos/configuration.nix|nix|<nowiki> | ||
networking.firewall.enable = true; | |||
</nowiki>}} | </nowiki>}} | ||
| Line 18: | Line 18: | ||
{{file|/etc/nixos/configuration.nix|nix|<nowiki> | {{file|/etc/nixos/configuration.nix|nix|<nowiki> | ||
networking.firewall = { | |||
enable = true; | |||
allowedTCPPorts = [ 80 443 ]; | |||
allowedUDPPortRanges = [ | |||
{ from = 4000; to = 4007; } | |||
{ from = 8000; to = 8010; } | |||
]; | |||
}; | |||
</nowiki>}} | </nowiki>}} | ||
| Line 39: | Line 39: | ||
{{file|/etc/nixos/configuration.nix|nix|<nowiki> | {{file|/etc/nixos/configuration.nix|nix|<nowiki> | ||
networking.firewall.interfaces."eth0".allowedTCPPorts = [ 80 443 ]; | |||
</nowiki>}} | </nowiki>}} | ||
| Line 52: | Line 52: | ||
{{file|/etc/nixos/configuration.nix|nix|<nowiki> | {{file|/etc/nixos/configuration.nix|nix|<nowiki> | ||
networking.firewall.extraInputRules = '' | |||
ip saddr 130.236.254.0/24 tcp dport 6600 accept | |||
ip6 saddr 2001:6b0:17:f0a0::/64 tcp dport 6600 accept | |||
''; | |||
</nowiki>}} | </nowiki>}} | ||