summaryrefslogtreecommitdiff
path: root/etc
diff options
context:
space:
mode:
authorXiao Pan <xyz@flylightning.xyz>2025-07-11 06:46:20 +0000
committerXiao Pan <xyz@flylightning.xyz>2025-07-11 06:46:20 +0000
commit5ebffabb14586c65c9d9d7799bd8707770411c00 (patch)
treec7ae7201f576fc7a53330d027df8c35e9a8639c7 /etc
parentf69bf276dd74cc5466450e6b730f39265ac49a74 (diff)
remove ssh forward to studio
Diffstat (limited to 'etc')
-rw-r--r--etc/nftables.conf3
-rw-r--r--etc/services3
2 files changed, 0 insertions, 6 deletions
diff --git a/etc/nftables.conf b/etc/nftables.conf
index c4b7e195..b07616b3 100644
--- a/etc/nftables.conf
+++ b/etc/nftables.conf
@@ -41,7 +41,6 @@ table inet my_table {
tcp dport imaps accept
tcp dport pop3s accept
tcp dport monerod-p2p accept
- tcp dport ssh-isp accept
pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited
counter comment "count any other traffic"
@@ -80,8 +79,6 @@ table inet nat {
# https://www.procustodibus.com/blog/2022/09/wireguard-port-forward-from-internet
iifname $pub_iface tcp dport monerod-p2p dnat ip to 10.0.0.1:monerod-p2p
iifname $pub_iface tcp dport monerod-p2p dnat ip6 to [fdc9:281f:04d7:9ee9::1]:monerod-p2p
- iifname $pub_iface tcp dport ssh-isp dnat ip to 10.0.0.3:ssh
- iifname $pub_iface tcp dport ssh-isp dnat ip6 to [fdc9:281f:04d7:9ee9::3]:ssh
}
# for all packets to $pub_iface, after routing, replace source address with primary IP of $pub_iface interface
chain postrouting {
diff --git a/etc/services b/etc/services
index 7e3ee370..df4d79cb 100644
--- a/etc/services
+++ b/etc/services
@@ -11521,8 +11521,5 @@ inspider 49150/tcp
# my services
monerod-p2p 18080/tcp
wireguard 49432/udp
-# My ISP verizon block incomming to gateway port 22. So I need to use another port to ssh into my home server.
-# https://www.reddit.com/r/verizon/comments/to1q43/verizon_5g_home_internet_blocking_ssh_service_port/
-ssh-isp 49812/tcp
iperf3 53497/tcp
swgp 54635/udp