l: allow dns requests from retiolum

2017-10-26 19:18:53 +02:00 · 2017-10-26 19:18:53 +02:00 · 45f205e1c5
parent bdbddc4c28
commit 45f205e1c5
1 changed files with 1 additions and 0 deletions
--- a/lass/2configs/default.nix
+++ b/lass/2configs/default.nix
@ -210,6 +210,7 @@ with import <stockholm/lib>;
        { predicate = "-p tcp -i retiolum"; target = "REJECT --reject-with tcp-reset"; precedence = -10000; }
        { predicate = "-p udp -i retiolum"; target = "REJECT --reject-with icmp-port-unreachable"; v6 = false; precedence = -10000; }
        { predicate = "-i retiolum"; target = "REJECT --reject-with icmp-proto-unreachable"; v6 = false; precedence = -10000; }
+        { predicate = "-i retiolum -p udp -m udp --dport 53"; target = "ACCEPT"; }
      ];
    };
  };