eggle.m4, local.m4, local.mk: Add new VPS `eggle'.

[firewall] / national.m4

diff --git a/national.m4 b/national.m4
index 01551af..d7d22b1 100644 (file)
--- a/national.m4
+++ b/national.m4
@@ -33,5 +33,14 @@ allowservices inbound tcp \
 allowservices inbound udp \
        tripe
 
+## We use public NTP servers.
+run ip46tables -A inbound -j ACCEPT \
+       -m state --state ESTABLISHED \
+       -p udp --source-port 123 --destination-port 123
+
+## Other interesting things.
+dnsresolver inbound
+dnsserver inbound
+
 m4_divert(-1)
 ###----- That's all, folks --------------------------------------------------