From 3a92693611449db0c66d767fd708d5d71f0adf2b Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Sat, 4 Nov 2023 22:50:37 -0400 Subject: [PATCH] move PowerDNS webserver to localhost port 81 --- nftables-ns1.conf | 2 +- nftables-ns2.conf | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/nftables-ns1.conf b/nftables-ns1.conf index 16b239f..d304899 100644 --- a/nftables-ns1.conf +++ b/nftables-ns1.conf @@ -55,7 +55,7 @@ table inet filter { skuid unbound meta l4proto {tcp, udp} th sport 53 th dport >= 1024 accept skuid {chrony, geoipupdate} meta l4proto {tcp, udp} th sport >= 1024 th dport 53 accept - skuid powerdns meta l4proto tcp th sport 80 th dport >= 1024 accept + skuid powerdns meta l4proto tcp th sport 81 th dport >= 1024 accept skuid != root counter goto output-reject accept diff --git a/nftables-ns2.conf b/nftables-ns2.conf index 2d34932..a283764 100644 --- a/nftables-ns2.conf +++ b/nftables-ns2.conf @@ -57,7 +57,7 @@ table inet filter { skuid unbound meta l4proto {tcp, udp} th sport 53 th dport >= 1024 accept skuid {chrony, geoipupdate} meta l4proto {tcp, udp} th sport >= 1024 th dport 53 accept - skuid powerdns meta l4proto tcp th sport 80 th dport >= 1024 accept + skuid powerdns meta l4proto tcp th sport 81 th dport >= 1024 accept skuid != root counter goto output-reject accept