### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
###--------------------------------------------------------------------------
### Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
###--------------------------------------------------------------------------
-## Provide DNS resolution to local untrusted hosts.
-for p in tcp udp; do
- run iptables -A inbound -j ACCEPT \
- -s 172.29.198.0/24 \
- -p $p --destination-port $port_dns
-done
+allowservices inbound-untrusted tcp \
+ dns \
+ lpd \
+ netbios_ssn microsoft_ds
+allowservices inbound-untrusted udp \
+ dns \
+ tftp
## Provide syslog for evolution.
run iptables -A inbound -j ACCEPT \
-s 172.29.198.2 \
-p udp --destination-port $port_syslog
## Provide syslog for evolution.
run iptables -A inbound -j ACCEPT \
-s 172.29.198.2 \
-p udp --destination-port $port_syslog
## Watch outgoing Tor usage.
run iptables -A OUTPUT -m multiport \
-p tcp --source-ports $port_tor_public,$port_tor_directory
## Other interesting things.
dnsresolver inbound
## Watch outgoing Tor usage.
run iptables -A OUTPUT -m multiport \
-p tcp --source-ports $port_tor_public,$port_tor_directory
## Other interesting things.
dnsresolver inbound
-ntpclient inbound 158.152.1.76 158.152.1.204 194.159.253.2
+dnsserver inbound
+ntpclient inbound $ntp_servers
+
+## Provide NTP service to untrusted clients.
+ip46tables -A inbound-untrusted -p udp -j ACCEPT \
+ --source-port 123 --destination-port 123