liminix

commit 0c406058e9eb939d9d3212fabdbc3b123d635a7e
parent 19d441333c87169685d8a8e8e1ce4127365c5c98
Author: Daniel Barlow <dan@telent.net>
Date:   Wed, 12 Feb 2025 21:54:01 +0000

remove acceotance of udp sport 5 on wan

this was added for replies to dns queries but isn't needed for
that purpose as connection tracking does that anyway

Diffstat:
M
modules/firewall/default-rules.nix
 | 
4
+---

1 file changed, 1 insertion(+), 3 deletions(-)
diff --git a/modules/firewall/default-rules.nix b/modules/firewall/default-rules.nix
@@ -200,9 +200,7 @@ in
     type = "filter";
     family = "ip";
 
-    rules = [
-      (accept "udp sport 53")
-    ];
+    rules = [];
   };
 
   input-ip4 = {