add ftp passive ports
This commit is contained in:
@@ -4,10 +4,11 @@
|
|||||||
networking = {
|
networking = {
|
||||||
hostName = "Stormwind";
|
hostName = "Stormwind";
|
||||||
networkmanager.enable = false;
|
networkmanager.enable = false;
|
||||||
|
defaultGateway = "192.168.0.1";
|
||||||
|
|
||||||
|
|
||||||
firewall = {
|
firewall = {
|
||||||
allowedTCPPorts = [ 80 443 8123 1883 8883 9001 20 21 22 2223 990 989 445 111 2049 32765 32768 20048 ];
|
allowedTCPPorts = [ 80 443 8123 1883 8883 9001 20 21 50000 50001 50002 50003 50004 50005 22 2223 990 989 445 111 2049 32765 32768 20048 ];
|
||||||
allowedUDPPorts = [ 111 2049 20048 32765 32768 ];
|
allowedUDPPorts = [ 111 2049 20048 32765 32768 ];
|
||||||
trustedInterfaces = [ "incusbr0" ];
|
trustedInterfaces = [ "incusbr0" ];
|
||||||
};
|
};
|
||||||
@@ -33,6 +34,12 @@
|
|||||||
iifname "enp4s0" oifname "incusbr0" tcp dport 9001 ct state new,established accept
|
iifname "enp4s0" oifname "incusbr0" tcp dport 9001 ct state new,established accept
|
||||||
iifname "enp4s0" oifname "incusbr0" tcp dport 20 ct state new,established accept
|
iifname "enp4s0" oifname "incusbr0" tcp dport 20 ct state new,established accept
|
||||||
iifname "enp4s0" oifname "incusbr0" tcp dport 21 ct state new,established accept
|
iifname "enp4s0" oifname "incusbr0" tcp dport 21 ct state new,established accept
|
||||||
|
iifname "enp4s0" oifname "incusbr0" tcp dport 50000 ct state new,established accept
|
||||||
|
iifname "enp4s0" oifname "incusbr0" tcp dport 50001 ct state new,established accept
|
||||||
|
iifname "enp4s0" oifname "incusbr0" tcp dport 50002 ct state new,established accept
|
||||||
|
iifname "enp4s0" oifname "incusbr0" tcp dport 50003 ct state new,established accept
|
||||||
|
iifname "enp4s0" oifname "incusbr0" tcp dport 50004 ct state new,established accept
|
||||||
|
iifname "enp4s0" oifname "incusbr0" tcp dport 50005 ct state new,established accept
|
||||||
iifname "enp4s0" oifname "incusbr0" tcp dport 22 ct state new,established accept
|
iifname "enp4s0" oifname "incusbr0" tcp dport 22 ct state new,established accept
|
||||||
iifname "enp4s0" oifname "incusbr0" tcp dport 2223 ct state new,established accept
|
iifname "enp4s0" oifname "incusbr0" tcp dport 2223 ct state new,established accept
|
||||||
iifname "enp4s0" oifname "incusbr0" tcp dport 990 ct state new,established accept
|
iifname "enp4s0" oifname "incusbr0" tcp dport 990 ct state new,established accept
|
||||||
@@ -123,6 +130,37 @@
|
|||||||
proto = "tcp";
|
proto = "tcp";
|
||||||
destination = "10.46.32.2:21";
|
destination = "10.46.32.2:21";
|
||||||
}
|
}
|
||||||
|
# FTP Passive Ports
|
||||||
|
{
|
||||||
|
sourcePort = 50000;
|
||||||
|
proto = "tcp";
|
||||||
|
destination = "10.46.32.2:50000";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
sourcePort = 50001;
|
||||||
|
proto = "tcp";
|
||||||
|
destination = "10.46.32.2:50001";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
sourcePort = 50002;
|
||||||
|
proto = "tcp";
|
||||||
|
destination = "10.46.32.2:50002";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
sourcePort = 50003;
|
||||||
|
proto = "tcp";
|
||||||
|
destination = "10.46.32.2:50003";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
sourcePort = 50004;
|
||||||
|
proto = "tcp";
|
||||||
|
destination = "10.46.32.2:50004";
|
||||||
|
}
|
||||||
|
{
|
||||||
|
sourcePort = 50005;
|
||||||
|
proto = "tcp";
|
||||||
|
destination = "10.46.32.2:50005";
|
||||||
|
}
|
||||||
{
|
{
|
||||||
sourcePort = 22;
|
sourcePort = 22;
|
||||||
proto = "tcp";
|
proto = "tcp";
|
||||||
|
|||||||
Reference in New Issue
Block a user