dan/liminix
1
0
Fork 5
Code

remove acceotance of udp sport 5 on wan

Browse Source 
this was added for replies to dns queries but isn't needed for
that purpose as connection tracking does that anyway
This commit is contained in:
Daniel Barlow 2025-02-12 21:54:01 +00:00
parent 19d441333c
commit 0c406058e9
1 changed files with 1 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
modules/firewall/default-rules.nix
View File

@ -200,9 +200,7 @@ in
type = "filter"; type = "filter";
family = "ip"; family = "ip";
rules = [ rules = [];
(accept "udp sport 53")
];
}; };
input-ip4 = { input-ip4 = {