summaryrefslogtreecommitdiff
path: root/etc/nftables.conf
diff options
context:
space:
mode:
Diffstat (limited to 'etc/nftables.conf')
-rw-r--r--etc/nftables.conf12
1 files changed, 11 insertions, 1 deletions
diff --git a/etc/nftables.conf b/etc/nftables.conf
index ab16ed11..da1f2f44 100644
--- a/etc/nftables.conf
+++ b/etc/nftables.conf
@@ -13,7 +13,6 @@ flush ruleset
define pub_iface = "eth0"
define wg_iface = "wg0"
-
table inet my_table {
chain my_input {
@@ -33,6 +32,17 @@ table inet my_table {
udp dport qbt accept
#tcp dport iperf3 accept
udp dport wireguard accept
+ udp dport swgp accept
+ # for acme.sh standalone mode builtin webserver to renew ssl cert
+ tcp dport http accept
+ # email related ports
+ tcp dport smtp accept
+ tcp dport pop3 accept
+ tcp dport imap accept
+ tcp dport submissions accept
+ tcp dport submission accept
+ tcp dport imaps accept
+ tcp dport pop3s accept
pkttype host limit rate 5/second counter reject with icmpx type admin-prohibited
counter comment "count any other traffic"