add ftp passive ports

This commit is contained in:
RootHost-Stormwind
2025-11-04 21:53:21 +01:00
parent 9158a76ac8
commit 2bb083cfb6

View File

@@ -4,10 +4,11 @@
networking = {
hostName = "Stormwind";
networkmanager.enable = false;
defaultGateway = "192.168.0.1";
firewall = {
allowedTCPPorts = [ 80 443 8123 1883 8883 9001 20 21 22 2223 990 989 445 111 2049 32765 32768 20048 ];
allowedTCPPorts = [ 80 443 8123 1883 8883 9001 20 21 50000 50001 50002 50003 50004 50005 22 2223 990 989 445 111 2049 32765 32768 20048 ];
allowedUDPPorts = [ 111 2049 20048 32765 32768 ];
trustedInterfaces = [ "incusbr0" ];
};
@@ -33,6 +34,12 @@
iifname "enp4s0" oifname "incusbr0" tcp dport 9001 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 20 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 21 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 50000 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 50001 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 50002 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 50003 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 50004 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 50005 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 22 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 2223 ct state new,established accept
iifname "enp4s0" oifname "incusbr0" tcp dport 990 ct state new,established accept
@@ -123,6 +130,37 @@
proto = "tcp";
destination = "10.46.32.2:21";
}
# FTP Passive Ports
{
sourcePort = 50000;
proto = "tcp";
destination = "10.46.32.2:50000";
}
{
sourcePort = 50001;
proto = "tcp";
destination = "10.46.32.2:50001";
}
{
sourcePort = 50002;
proto = "tcp";
destination = "10.46.32.2:50002";
}
{
sourcePort = 50003;
proto = "tcp";
destination = "10.46.32.2:50003";
}
{
sourcePort = 50004;
proto = "tcp";
destination = "10.46.32.2:50004";
}
{
sourcePort = 50005;
proto = "tcp";
destination = "10.46.32.2:50005";
}
{
sourcePort = 22;
proto = "tcp";