From 11287a8436e0700b65d3a3edef48f9344500bbd6 Mon Sep 17 00:00:00 2001
From: Daniel Barlow <dan@telent.net>
Date: Sun, 11 Feb 2024 23:31:15 +0000
Subject: [PATCH] allow lan dns queries (ipv6)

---
 examples/demo-firewall.nix | 1 +
 1 file changed, 1 insertion(+)

diff --git a/examples/demo-firewall.nix b/examples/demo-firewall.nix
index 3f381a5..58d6fbf 100644
--- a/examples/demo-firewall.nix
+++ b/examples/demo-firewall.nix
@@ -107,6 +107,7 @@ in {
 
     rules = [
       (accept "udp dport 547") # dhcp, could restrict to daddr ff02::1:2
+      (accept "udp dport 53") # dns
       (accept "tcp dport 22")
     ];
   };