summaryrefslogtreecommitdiff
path: root/etc/nftables.conf
AgeCommit message (Collapse)Author
27 hoursnft accept monerod-p2p port to forward to inspbaXiao Pan
35 hoursnft define a set variable for two ip to use, allow port forward monerod-p2pXiao Pan
6 daysnft masquerade 6in4 sit tunnel network interface name ipv6net so insp wg to ↵Xiao Pan
ba can use ipv6
6 daysinit baXiao Pan
11 daysinit xyzru VPSXiao Pan
11 daysnft config studio wg swgp wg to ca, studio use ::b ip6, ca use ::a ip6 so it ↵Xiao Pan
can do acme.sh
2025-05-02Add nft rules to port forward insp xmrd p2p when insp VPN into itXiao Pan
Also added monero-p2p port number to /etc/services for nft to use
2024-06-28feat: wg and swgp config, mainly for aaXiao Pan
2024-04-09swith to new ca server; wireguard no needXiao Pan
2024-04-05Add email server configsXiao Pan
References: https://github.com/LukeSmithxyz/emailwiz https://landchad.net/ https://wiki.archlinux.org/title/Postfix https://wiki.archlinux.org/title/Dovecot https://wiki.archlinux.org/title/OpenDKIM https://wiki.archlinux.org/title/OpenDMARC Maybe useful: https://doc.dovecot.org/settings/core/#dovecot-core-settings https://workaround.org https://kyun.host/docs/guides/email `man postconf.5` More necessary commands notes see arch_install.md
2024-03-20add future maybe enable ports to nft confXiao Pan
2024-03-18ca no qbtXiao Pan
2024-03-11Rename to wg0 so no need change names for new computer config.Xiao Pan
2024-03-05fix: name ia not kaXiao Pan
2023-12-03newer kernel no need for `chain prerouting { type nat hook prerouting ↵Xiao Pan
priority -100; policy accept; }`, more see https://www.procustodibus.com/blog/2021/11/wireguard-nftables/
2023-12-03maybe prevent ipv6 leakXiao Pan
2023-11-17change wg0 to wg_kaXiao Pan
2023-07-07allow from wg0 network interface so when connected via wireguard, I can ↵Xiao Pan
access local services in xyzka that does not have port open for outside
2023-07-07try close qbt-nox port and only access qbt-nox via wireguardXiao Pan
2023-07-04debloatXiao Pan
2023-07-01change qbt port name etc.Xiao Pan
2023-06-29wireguard nft firewall configsXiao Pan
2023-06-29prepare for wgXiao Pan
2023-06-13HDD monerod even with `monero-blockchain-import ↵Xiao Pan
--dangerous-unverified-import 1` is still super slow on ka, I give up
2023-06-12change monero-p2p port to default, open that portXiao Pan
2023-06-12updateXiao Pan
2023-06-12updateXiao Pan
2023-06-01nft, iperf3 port, commented out, maybe useful for futureXiao Pan
2023-05-31edit some filesXiao Pan
2022-05-28nftable accept monerod mullvad forward portxyz
2022-03-12nft no test rpi-vid portxyz
2022-03-05open rpi-vid port for testingxyz
2022-02-10nftables allow mullvad vpn port forwardingxyz
2022-01-30nftables.conf, allow qrcp, drop ssh and searx, based on services and config ↵xyz
files
2022-01-30nftables.conf, create and delete tables at top so can reloadxyz
2022-01-30nftables.conf, edited according to examples in arch wikixyz
2022-01-30add nftables.conf originalxyz
generated by cgit v1.2.3-70-g09d2 (git 2.50.1) at 2025-07-14 19:27:33 +0000