talexander
/
machine_setup
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow the wireguard interfaces.

This commit is contained in:
Tom Alexander 2022-12-04 02:12:10 -05:00
parent 0598d33eb2
commit 4b4dca9a49
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ansible/roles/firewall/files/homeserver_pf.conf
View File

@ -3,7 +3,7 @@ jail_net_v4 = "10.193.223.0/24"
full_nat_v4 = "10.213.177.0/24" full_nat_v4 = "10.213.177.0/24"
dhcp = "{ bootpc, bootps }" dhcp = "{ bootpc, bootps }"
# allow = "{ }" allow = "{ wgh wgf }"
tcp_pass_in = "{ 22 }" tcp_pass_in = "{ 22 }"
udp_pass_in = "{ 53 51820 }" udp_pass_in = "{ 53 51820 }"
@ -32,7 +32,7 @@ pass out on $ext_if
# `service pf reload` but interfaces that we `skip` will not update (I # `service pf reload` but interfaces that we `skip` will not update (I
# forget if its from adding, removing, or both. TODO: test to figure # forget if its from adding, removing, or both. TODO: test to figure
# it out) # it out)
# pass quick on $allow pass quick on $allow
pass on $ext_if proto icmp all pass on $ext_if proto icmp all
pass on $ext_if proto icmp6 all pass on $ext_if proto icmp6 all

4
ansible/roles/firewall/files/odofreebsd_pf.conf
View File

@ -3,7 +3,7 @@ jail_net_v4 = "10.193.223.0/24"
full_nat_v4 = "10.213.177.0/24" full_nat_v4 = "10.213.177.0/24"
dhcp = "{ bootpc, bootps }" dhcp = "{ bootpc, bootps }"
# allow = "{ host_uplink0 }" allow = "{ wgf wgh }"
tcp_pass_in = "{ 22 }" tcp_pass_in = "{ 22 }"
udp_pass_in = "{ 53 51820 }" udp_pass_in = "{ 53 51820 }"
@ -30,7 +30,7 @@ pass out on $ext_if
# `service pf reload` but interfaces that we `skip` will not update (I # `service pf reload` but interfaces that we `skip` will not update (I
# forget if its from adding, removing, or both. TODO: test to figure # forget if its from adding, removing, or both. TODO: test to figure
# it out) # it out)
# pass quick on $allow pass quick on $allow
pass on $ext_if proto icmp all pass on $ext_if proto icmp all
pass on $ext_if proto icmp6 all pass on $ext_if proto icmp6 all