allow TCP DNS as well for VPN subnet

2020-03-04 17:50:35 -05:00 · 2020-03-04 17:50:35 -05:00 · f9e74ee5aa
parent 13f9b1575c
commit f9e74ee5aa
1 changed files with 1 additions and 0 deletions
--- a/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.asininetech.net.rules.v4
+++ b/ubuntu/roles/firewall-ruleset-deploy/files/demonreach.asininetech.net.rules.v4
@ -11,6 +11,7 @@
 -A INPUT -p tcp -m multiport --dports 5269,5222 -j ACCEPT
 -A INPUT -p udp --dport 1194 -j ACCEPT
 -A INPUT -p udp --dport 53 -s 10.8.0.1/24 -j ACCEPT
+-A INPUT -p tcp --dport 53 -s 10.8.0.1/24 -j ACCEPT
 COMMIT
 *nat
 :PREROUTING ACCEPT