From dfa2f48ae122960656ed2a35c980ce1f32dd0b4d Mon Sep 17 00:00:00 2001
From: Daniel Micay <daniel.micay@grapheneos.org>
Date: Fri, 27 Jun 2025 14:11:44 -0400
Subject: [PATCH] move zerotier-one to port 999

---
 etc/nftables/nftables-ns1.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/etc/nftables/nftables-ns1.conf b/etc/nftables/nftables-ns1.conf
index 97c6fee..fe23ed6 100644
--- a/etc/nftables/nftables-ns1.conf
+++ b/etc/nftables/nftables-ns1.conf
@@ -135,7 +135,7 @@ table inet filter {
 
         skuid dnsdist tcp sport 55 tcp dport >= 1024 notrack accept
 
-        skuid zerotier-one tcp sport 9993 tcp dport >= 1024 notrack accept
+        skuid zerotier-one tcp sport 999 tcp dport >= 1024 notrack accept
 
         skuid != root counter goto graceful-reject
         notrack accept