summaryrefslogtreecommitdiff
path: root/etc/nftables.conf
diff options
context:
space:
mode:
Diffstat (limited to 'etc/nftables.conf')
-rw-r--r--etc/nftables.conf7
1 files changed, 6 insertions, 1 deletions
diff --git a/etc/nftables.conf b/etc/nftables.conf
index 41f490e9..87596f55 100644
--- a/etc/nftables.conf
+++ b/etc/nftables.conf
@@ -28,12 +28,17 @@ table inet my_table {
meta l4proto ipv6-icmp accept
tcp dport ssh accept
- tcp dport iperf3 accept
+ #tcp dport iperf3 accept
udp dport wireguard accept
# mimic is both tcp and udp see perma link:
# https://github.com/hack3ric/mimic/blob/572a2ae5aeaa156afc2d6064a763e842962735bf/docs/getting-started.md#firewall
tcp dport swgp accept
udp dport swgp accept
+ # wg swgp mimic to ba then ba swgp config set wgEndpoint forward to ib
+ tcp dport swgp-ba-forward-ib accept
+ udp dport swgp-ba-forward-ib accept
+ tcp dport swgp-ba-forward-ca accept
+ udp dport swgp-ba-forward-ca accept
tcp dport monerod-p2p accept
pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited