Git-Mirrors/graphene-os-server-infrastructure
1
0
Fork 0
mirror of https://github.com/GrapheneOS/infrastructure.git synced 2025-06-24 14:40:36 -04:00
Code Issues Projects Releases Packages Wiki Activity

baseline web server config doesn't use DNS

Browse source
This commit is contained in:
Daniel Micay 2023-02-11 03:18:02 -05:00
parent 8b96ee620c
commit 34d0f7fc3b
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
nftables-web.conf
View file

@ -49,7 +49,7 @@ table inet filter {
chain output-internal {
skuid unbound meta l4proto {tcp, udp} th sport 53 th dport >= 1024 accept
skuid {chrony, http} meta l4proto {tcp, udp} th sport >= 1024 th dport 53 accept
skuid chrony meta l4proto {tcp, udp} th sport >= 1024 th dport 53 accept
skuid != root counter goto output-reject
accept