Add wireguard configuration.

This commit is contained in:
Darren 'Tadgy' Austin 2026-04-10 18:08:04 +00:00
commit f5a53363e6
11 changed files with 267 additions and 221 deletions

View file

@ -1,7 +1,7 @@
# These rules are applied as the default firewall when there are no state rules to be applied.
# Generated by iptables-save v1.8.11 (nf_tables) on Fri Apr 10 15:06:21 2026
*filter
:INPUT DROP [0:0]
:FORWARD DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:sshguard - [0:0]
-A INPUT -m conntrack --ctstate INVALID -j DROP
@ -20,5 +20,7 @@
-A INPUT -j sshguard
-A INPUT -p tcp -m multiport --dports 22,25422 -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -p tcp -m tcp --dport 873 -m conntrack --ctstate NEW -j ACCEPT
-A INPUT -p udp -m udp --dport 25420 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 25443 -m conntrack --ctstate NEW -j ACCEPT
COMMIT
# Completed on Fri Apr 10 15:06:21 2026