From c1c71f1965a75afd8209c78b6f19b86a5ff0a92e Mon Sep 17 00:00:00 2001 From: packetcat Date: Thu, 21 Nov 2024 04:07:18 -0500 Subject: [PATCH] wrong subnet --- .../files/demonreach.silvestris.systems.rules.v4 | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.silvestris.systems.rules.v4 b/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.silvestris.systems.rules.v4 index 6be97d8..3bb8fb1 100644 --- a/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.silvestris.systems.rules.v4 +++ b/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.silvestris.systems.rules.v4 @@ -10,13 +10,11 @@ -A INPUT -p tcp --dport 9001 -j ACCEPT -A INPUT -p tcp -m multiport --dports 5269,5222 -j ACCEPT -A INPUT -p udp --dport 1194 -j ACCEPT --A INPUT -p udp --dport 53 -s 10.8.0.1/24 -j ACCEPT --A INPUT -p tcp --dport 53 -s 10.8.0.1/24 -j ACCEPT --A INPUT -p tcp --dport 5353 -s 10.8.0.1/24 -j ACCEPT +-A INPUT -p udp --dport 53 -s 10.8.0.0/24 -j ACCEPT +-A INPUT -p tcp --dport 53 -s 10.8.0.0/24 -j ACCEPT -A INPUT -p udp --dport 53 -s 10.66.66.0/24 -j ACCEPT -A INPUT -p tcp --dport 53 -s 10.66.66.0/24 -j ACCEPT --A INPUT -p udp --dport 53 -s 100.64.0.0/10 -j ACCEPT --A INPUT -p tcp --dport 53 -s 100.64.0.0/10 -j ACCEPT +-A INPUT -p udp --dport 5353 -s 10.66.66.0/24 -j ACCEPT -A INPUT -p udp --dport 51802 -j ACCEPT COMMIT *nat