celso
/
homemade_firewall
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

added games and removed unnecesary brackets

This commit is contained in:
celso 2024-12-13 02:44:37 -03:00
parent 8f95d74464
commit a4bad496d3
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
defines.nft
View File

@ -6,11 +6,16 @@ define SSH_PORT1 = 22
define SSH_PORT2 = 8022 define SSH_PORT2 = 8022
define HTTP_PORT = 80 define HTTP_PORT = 80
define HTTPS_PORT = 443 define HTTPS_PORT = 443
define SYNCPLAY_PORT = 60000
define TERRARIA_PORT = 7777
# TCP and UDP services (needs to go in both sets) # TCP and UDP services (needs to go in both sets)
define DNS_PORT = 53 define DNS_PORT = 53
define OPENTTD_PORT = 3979
# UDP only services # UDP only services
define DHCP_IN_PORT = 67 define DHCP_IN_PORT = 67
define DHCP_OUT_PORT = 68 define DHCP_OUT_PORT = 68
define OPENVPN_PORT = 1194 define OPENVPN_PORT = 1194
define FACTORIO_PORT = 34197
define CSTRIKE_PORT = 27015

6
filter.nft
View File

@ -7,13 +7,13 @@ table ip filter {
set allowed_tcp_ports { set allowed_tcp_ports {
type inet_service; type inet_service;
flags constant; flags constant;
elements = { $SSH_PORT1, $SSH_PORT2, $DNS_PORT, $HTTP_PORT, $HTTPS_PORT }; elements = { $SSH_PORT1, $SSH_PORT2, $DNS_PORT, $HTTP_PORT, $HTTPS_PORT, $SYNCPLAY_PORT, $TERRARIA_PORT, $OPENTTD_PORT };
} }
set allowed_udp_ports_in { set allowed_udp_ports_in {
type inet_service; type inet_service;
flags constant; flags constant;
elements = { $DNS_PORT, $DHCP_IN_PORT, $OPENVPN_PORT } elements = { $DNS_PORT, $DHCP_IN_PORT, $OPENVPN_PORT, $FACTORIO_PORT, $OPENTTD_PORT, $CSTRIKE_PORT }
} }
set allowed_udp_ports_out { set allowed_udp_ports_out {
@ -25,7 +25,7 @@ table ip filter {
chain in { chain in {
type filter hook input priority filter; policy drop; type filter hook input priority filter; policy drop;
ct state invalid drop; ct state invalid drop;
ct state {related,established} accept; ct state related,established accept;
iifname "lo" accept; iifname "lo" accept;
tcp dport @allowed_tcp_ports accept; tcp dport @allowed_tcp_ports accept;
udp dport @allowed_udp_ports_in accept; udp dport @allowed_udp_ports_in accept;