Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-11-29 02:46:32 -05:00
Code Issues Projects Releases Packages Wiki Activity

allow powerdns user to query pdns over loopback

Browse source 
This is being used by the pdns-trigger-health-checks script.
This commit is contained in:
Daniel Micay 2025-10-23 13:52:58 -04:00
parent 9c2183c794
commit 048ccb3fba
2 changed files with 2 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
etc/nftables/nftables-ns1.conf
View file

@ -138,7 +138,7 @@ table inet filter {
skuid { alpm, chrony, geoipupdate, zerotier-one } meta l4proto { tcp, udp } th sport >= 1024 th dport 53 notrack accept
skuid powerdns meta l4proto { tcp, udp } th sport 54 th dport >= 1024 notrack accept
skuid dnsdist meta l4proto { tcp, udp } th sport >= 1024 th dport 54 notrack accept
skuid { dnsdist, powerdns } meta l4proto { tcp, udp } th sport >= 1024 th dport 54 notrack accept
skuid dnsdist tcp sport 55 tcp dport >= 1024 notrack accept

2
etc/nftables/nftables-ns2.conf
View file

@ -175,7 +175,7 @@ table inet filter {
skuid { alpm, chrony, geoipupdate } meta l4proto { tcp, udp } th sport >= 1024 th dport 53 notrack accept
skuid powerdns meta l4proto { tcp, udp } th sport 54 th dport >= 1024 notrack accept
skuid dnsdist meta l4proto { tcp, udp } th sport >= 1024 th dport 54 notrack accept
skuid { dnsdist, powerdns } meta l4proto { tcp, udp } th sport >= 1024 th dport 54 notrack accept
skuid dnsdist tcp sport 55 tcp dport >= 1024 notrack accept