* Enable the firewall on cartman.
svn path=/configurations/trunk/tud/; revision=26237
Eelco Dolstra committed
Mar 9, 2011 at 16:55 UTC
1a5f4bb27515beb9feeb692014e2581966bd8e17
1 file changed
+7
-1
cartman.nix
+7
-1
@@ -84,6 +84,12 @@ rec {
84
85
extraHosts = "192.168.1.5 cartman";
86
87
+ firewall.enable = true;
88
+ firewall.allowedTCPPorts = [ 80 443 10051 ];
89
+ firewall.allowedUDPPorts = [ 53 67 ];
90
+ firewall.rejectPackets = true;
91
+ firewall.allowPing = true;
92
+
93
localCommands =
94
''
95
# Provide NATting for the build machines on 192.168.1.*.
@@ -102,7 +108,7 @@ rec {
108
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 -j SNAT --to-source ${myIP}
109
110
# lucifer ssh (to give Karl/Armijn access for the BAT project)
105
- iptables -t nat -A PREROUTING -p tcp -i eth1 --dport 22222 -j DNAT --to 192.168.1.25:22
111
+ #iptables -t nat -A PREROUTING -p tcp -i eth1 --dport 22222 -j DNAT --to 192.168.1.25:22
112
113
echo 1 > /proc/sys/net/ipv4/ip_forward
114