From 04a8ba064fcf15904b610b22fd1391a71f0bb8f9 Mon Sep 17 00:00:00 2001 From: Tom Alexander Date: Thu, 27 Apr 2023 17:02:21 -0400 Subject: [PATCH] This nat rule doesn't seem necessary. --- ansible/roles/firewall/files/homeserver_pf.conf | 1 - 1 file changed, 1 deletion(-) diff --git a/ansible/roles/firewall/files/homeserver_pf.conf b/ansible/roles/firewall/files/homeserver_pf.conf index 933fea2..75dd668 100644 --- a/ansible/roles/firewall/files/homeserver_pf.conf +++ b/ansible/roles/firewall/files/homeserver_pf.conf @@ -23,7 +23,6 @@ rdr pass on $not_ext_if proto {tcp, udp} from any to 10.215.1.1 port 53 -> 1.1.1 nat pass on $ext_if inet from 10.215.2.0/24 to !10.215.2.0/24 -> (wlan0) rdr pass on $not_ext_if proto {tcp, udp} from any to 10.215.2.1 port 53 -> 1.1.1.1 port 53 -nat pass on restricted_nat inet proto tcp from any to any port 8081 -> (restricted_nat) rdr pass on $ext_if inet proto tcp from any to any port 8081 -> 10.215.2.2 port 8081 # Forward ports for unifi controller