X-Git-Url: https://git.distorted.org.uk/~mdw/firewall/blobdiff_plain/78af294cd1005453cf8b7a0dda4593ba101b345e..994ac8d0782c89a636f47b02a2dc096c72ff58c5:/artist.m4 diff --git a/artist.m4 b/artist.m4 index a04cc9c..2997769 100644 --- a/artist.m4 +++ b/artist.m4 @@ -24,13 +24,14 @@ ###-------------------------------------------------------------------------- ### artist-specific rules. -m4_divert(84)m4_dnl +m4_divert(86)m4_dnl ## Externally visible services. allowservices inbound tcp \ ssh \ ident \ ftp ftp_data \ http https \ + disorder \ tor_public tor_directory i2p allowservices inbound udp \ i2p @@ -45,5 +46,15 @@ run iptables -A inbound -j ACCEPT \ -p tcp -m multiport --destination-ports \ $port_netbios_ssn,$port_microsoft_ds +## Open ports for Rygel. +run iptables -A inbound -j ACCEPT -s 172.29.198.0/23 -p igmp +run iptables -A inbound -j ACCEPT -s 172.29.198.0/23 \ + -d 239.255.255.250 -p udp --destination-port 1900 +run iptables -A inbound -j ACCEPT -s 172.29.198.0/23 \ + -p tcp --destination-port 9501 + +## Other interesting things. +dnsresolver inbound + m4_divert(-1) ###----- That's all, folks --------------------------------------------------