Add wireguard configuration.
This commit is contained in:
parent
512aedcb9f
commit
f5a53363e6
11 changed files with 267 additions and 221 deletions
|
|
@ -1,7 +1,7 @@
|
|||
# These rules are applied as the default firewall when there are no state rules to be applied.
|
||||
# Generated by iptables-save v1.8.11 (nf_tables) on Fri Apr 10 15:06:21 2026
|
||||
*filter
|
||||
:INPUT DROP [0:0]
|
||||
:FORWARD DROP [0:0]
|
||||
:FORWARD ACCEPT [0:0]
|
||||
:OUTPUT ACCEPT [0:0]
|
||||
:sshguard - [0:0]
|
||||
-A INPUT -m conntrack --ctstate INVALID -j DROP
|
||||
|
|
@ -20,5 +20,7 @@
|
|||
-A INPUT -j sshguard
|
||||
-A INPUT -p tcp -m multiport --dports 22,25422 -m conntrack --ctstate NEW -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 873 -m conntrack --ctstate NEW -j ACCEPT
|
||||
-A INPUT -p udp -m udp --dport 25420 -j ACCEPT
|
||||
-A INPUT -p tcp -m tcp --dport 25443 -m conntrack --ctstate NEW -j ACCEPT
|
||||
COMMIT
|
||||
# Completed on Fri Apr 10 15:06:21 2026
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue