summaryrefslogtreecommitdiff
path: root/etc/nftables.conf
diff options
context:
space:
mode:
authorXiao Pan <gky44px1999@gmail.com>2024-04-05 12:02:22 +0000
committerXiao Pan <gky44px1999@gmail.com>2024-04-05 12:02:22 +0000
commit416a0ca8403db1d0b841b958ad4bc5e93990af5e (patch)
tree779ae5c0252bb92ebc8f4bfd03c63e7086838978 /etc/nftables.conf
parent820ec977a50ffe92d59ad7a2434d9efeafe99a49 (diff)
Add email server configs
References: https://github.com/LukeSmithxyz/emailwiz https://landchad.net/ https://wiki.archlinux.org/title/Postfix https://wiki.archlinux.org/title/Dovecot https://wiki.archlinux.org/title/OpenDKIM https://wiki.archlinux.org/title/OpenDMARC Maybe useful: https://doc.dovecot.org/settings/core/#dovecot-core-settings https://workaround.org https://kyun.host/docs/guides/email `man postconf.5` More necessary commands notes see arch_install.md
Diffstat (limited to 'etc/nftables.conf')
-rw-r--r--etc/nftables.conf16
1 files changed, 10 insertions, 6 deletions
diff --git a/etc/nftables.conf b/etc/nftables.conf
index bd943c12..c4ca7f45 100644
--- a/etc/nftables.conf
+++ b/etc/nftables.conf
@@ -33,12 +33,16 @@ table inet my_table {
#udp dport qbt accept
#tcp dport iperf3 accept
udp dport wireguard accept
- # email ports
- #tcp dport smtp accept
- #udp dport smtp accept
- # other email ports? seems blocked by crunchbits
- #tcp dport 465 accept
- #tcp dport 587 accept
+ # for acme.sh standalone mode builtin webserver to renew ssl cert
+ tcp dport http accept
+ # email related ports
+ tcp dport smtp accept
+ tcp dport pop3 accept
+ tcp dport imap accept
+ tcp dport submissions accept
+ tcp dport submission accept
+ tcp dport imaps accept
+ tcp dport pop3s accept
pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited
counter comment "count any other traffic"