Firewall: Difference between revisions

m Temporary firewall rules: Remove statement that nixos-firewall-tool only works with iptables
DHCP (talk | contribs)
m fix indentation
 
Line 6: Line 6:


{{file|/etc/nixos/configuration.nix|nix|<nowiki>
{{file|/etc/nixos/configuration.nix|nix|<nowiki>
  networking.firewall.enable = true;
networking.firewall.enable = true;
</nowiki>}}
</nowiki>}}


Line 18: Line 18:


{{file|/etc/nixos/configuration.nix|nix|<nowiki>
{{file|/etc/nixos/configuration.nix|nix|<nowiki>
  networking.firewall = {
networking.firewall = {
    enable = true;
  enable = true;
    allowedTCPPorts = [ 80 443 ];
  allowedTCPPorts = [ 80 443 ];
    allowedUDPPortRanges = [
  allowedUDPPortRanges = [
      { from = 4000; to = 4007; }
    { from = 4000; to = 4007; }
      { from = 8000; to = 8010; }
    { from = 8000; to = 8010; }
    ];
  ];
  };   
};   
</nowiki>}}
</nowiki>}}


Line 39: Line 39:


{{file|/etc/nixos/configuration.nix|nix|<nowiki>
{{file|/etc/nixos/configuration.nix|nix|<nowiki>
  networking.firewall.interfaces."eth0".allowedTCPPorts = [ 80 443 ];
networking.firewall.interfaces."eth0".allowedTCPPorts = [ 80 443 ];
</nowiki>}}
</nowiki>}}


Line 52: Line 52:


{{file|/etc/nixos/configuration.nix|nix|<nowiki>
{{file|/etc/nixos/configuration.nix|nix|<nowiki>
    networking.firewall.extraInputRules = ''
networking.firewall.extraInputRules = ''
      ip saddr 130.236.254.0/24 tcp dport 6600 accept
  ip saddr 130.236.254.0/24 tcp dport 6600 accept
      ip6 saddr 2001:6b0:17:f0a0::/64 tcp dport 6600 accept
  ip6 saddr 2001:6b0:17:f0a0::/64 tcp dport 6600 accept
    '';
'';
</nowiki>}}
</nowiki>}}