talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Update firewall for unifi controller virtual machine.

Browse Source
This commit is contained in:
Tom Alexander
2023-01-16 17:05:47 -05:00
parent 8b25b3397f
commit 3734f2126c
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ansible/roles/firewall/files/homeserver_pf.conf
View File

@@ -7,6 +7,7 @@ allow = "{ wgh wgf }"
tcp_pass_in = "{ 22 }"
udp_pass_in = "{ 53 51820 }"
unifi_ports = "{ 8443 3478 10001 8080 1900 8843 8880 6789 5514 }"
# Rules must be in order: options, normalization, queueing, translation, filtering
@@ -23,6 +24,10 @@ rdr pass on host_uplink1 inet proto {tcp, udp} from any to 10.213.177.1 port 53
nat pass on host_uplink0 inet proto tcp from any to any port 8081 tag ALLOWED -> (host_uplink0)
rdr pass on $ext_if inet proto tcp from any to any port 8081 tag ALLOWED -> 10.193.223.20 port 8081
# Forward ports for unifi controller
rdr pass on $ext_if inet proto tcp from any to any port 65022 tag ALLOWED -> 10.213.177.8 port 22
rdr pass on $ext_if inet proto {udp, tcp} from any to any port $unifi_ports tag ALLOWED -> 10.213.177.8
# filtering
block log all
pass out on $ext_if