From 0a7c6e567e025994992462106ce5dee4fd1aac04 Mon Sep 17 00:00:00 2001
From: tv <tv@shackspace.de>
Date: Tue, 24 Mar 2015 18:35:41 +0100
Subject: [PATCH] module iptables-cd: allow xmpp
---
modules/iptables-cd.nix | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/modules/iptables-cd.nix b/modules/iptables-cd.nix
index 70736e49d..48425e8dc 100644
--- a/modules/iptables-cd.nix
+++ b/modules/iptables-cd.nix
@@ -50,8 +50,8 @@
#ipXtables -A INPUT -j ACCEPT -p tcp --dport http -m conntrack --ctstate NEW
ipXtables -A INPUT -j ACCEPT -p tcp --dport tinc -m conntrack --ctstate NEW
ipXtables -A INPUT -j ACCEPT -p tcp --dport smtp -m conntrack --ctstate NEW
- #ipXtables -A INPUT -j ACCEPT -p tcp --dport xmpp-client -m conntrack --ctstate NEW
- #ipXtables -A INPUT -j ACCEPT -p tcp --dport xmpp-server -m conntrack --ctstate NEW
+ ipXtables -A INPUT -j ACCEPT -p tcp --dport xmpp-client -m conntrack --ctstate NEW
+ ipXtables -A INPUT -j ACCEPT -p tcp --dport xmpp-server -m conntrack --ctstate NEW
ipXtables -A INPUT -j Retiolum -i retiolum
${when log "ipXtables -A INPUT -j LOG --log-level info --log-prefix 'INPUT DROP '"}