liminix

commit ae4856ea7c76017c6b9b5ce8db6d5925d9d27472
parent b9c0d93670275e69df24902b05bf4aa4f0fcbe96
Author: Daniel Barlow <dan@telent.net>
Date:   Mon, 12 Feb 2024 13:56:56 +0000

improve firewall comment

Diffstat:
M
examples/demo-firewall.nix
 | 
6
+++---

1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/examples/demo-firewall.nix b/examples/demo-firewall.nix
@@ -233,9 +233,9 @@ in {
     type = "filter";
     family = "ip";
     rules = [
-      # this is where you put permitted incoming
-      # connections. Practically there's not a lot of use for this
-      # chain unless you have routable ipv4 addresses
+      # This is where you put permitted incoming connections. If
+      # you're using NAT, the rules in this chain will see the
+      # internal (RFC1918) addresses.
     ];
   };