summaryrefslogtreecommitdiff
path: root/Biz/Dev/Networking.nix
diff options
context:
space:
mode:
Diffstat (limited to 'Biz/Dev/Networking.nix')
-rw-r--r--Biz/Dev/Networking.nix12
1 files changed, 10 insertions, 2 deletions
diff --git a/Biz/Dev/Networking.nix b/Biz/Dev/Networking.nix
index 88ec4fb..721b8bf 100644
--- a/Biz/Dev/Networking.nix
+++ b/Biz/Dev/Networking.nix
@@ -1,4 +1,4 @@
-{ ... }:
+{ lib, ... }:
let
ports = import ../Cloud/Ports.nix;
@@ -34,11 +34,19 @@ in {
ports.torrents
ports.httpdev
];
- allowedUDPPorts = [ ports.murmur ports.et ];
+ allowedUDPPorts = [
+ ports.dns
+ ports.et
+ ports.murmur
+ ];
allowedUDPPortRanges = [
ports.torrents
];
checkReversePath = false;
+ #extraCommands = lib.mkMerge [ (lib.mkAfter ''
+ # iptables -w -t filter -A nixos-fw -s 192.168.0.0/24 -p udp --dport 53 -i enp1s0 -j nixos-fw-accept
+ # iptables -w -t filter -A nixos-fw -s 192.168.0.0/24 -p tcp --dport 53 -i enp1s0 -j nixos-fw-accept
+ #'') ];
};
# The global useDHCP flag is deprecated, therefore explicitly set to false here.