diff options
| author | tv <tv@krebsco.de> | 2017-11-02 21:44:31 +0100 |
|---|---|---|
| committer | tv <tv@krebsco.de> | 2017-11-02 21:44:31 +0100 |
| commit | 7f342406b7e5e65467128c2c06d443e437fffb28 (patch) | |
| tree | 39ebfca930d1c331b54b7bf3bfb422c6cfa80348 /lass/2configs/default.nix | |
| parent | ab98a1be65369ae3c06de8f6219275e882f08fa7 (diff) | |
| parent | 6934b5d83f245b723cf7d685d7ab0a758947bdc8 (diff) | |
Merge remote-tracking branch 'prism/master'
Diffstat (limited to 'lass/2configs/default.nix')
| -rw-r--r-- | lass/2configs/default.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/lass/2configs/default.nix b/lass/2configs/default.nix index 10d14e151..180647a6d 100644 --- a/lass/2configs/default.nix +++ b/lass/2configs/default.nix @@ -210,6 +210,7 @@ with import <stockholm/lib>; { predicate = "-p tcp -i retiolum"; target = "REJECT --reject-with tcp-reset"; precedence = -10000; } { predicate = "-p udp -i retiolum"; target = "REJECT --reject-with icmp-port-unreachable"; v6 = false; precedence = -10000; } { predicate = "-i retiolum"; target = "REJECT --reject-with icmp-proto-unreachable"; v6 = false; precedence = -10000; } + { predicate = "-i retiolum -p udp -m udp --dport 53"; target = "ACCEPT"; } ]; }; }; |