Remove trusted internal interface, allow postgresql from lucifer
Rob Vermaas committed
Jun 7, 2013 at 17:22 UTC
b64eede8b26b0c57a19fcd931b508d0136dbb869
1 file changed
+1
-1
delft/wendy.nix
+1
-1
@@ -140,10 +140,10 @@ in
140
141
firewall.allowedTCPPorts = [ 80 443 843 10051 5999 ];
142
firewall.allowedUDPPorts = [ 53 67 ];
143
- firewall.trustedInterfaces = [ "internal" ];
143
firewall.extraCommands =
144
''
145
ip46tables -I nixos-fw-accept -p tcp --dport 843 --syn -j LOG --log-level info --log-prefix "POLICY REQUEST: "
146
+ ip46tables -A nixos-fw -p tcp --dport 5432 -s 192.168.1.25 -j nixos-fw-accept
147
'';
148
149
nat.enable = true;