talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Enable ipv6 on homeserver.

Browse Source
This commit is contained in:
Tom Alexander
2024-07-12 21:44:43 -04:00
parent 0e2c7adaf9
commit 6be368a1e8
8 changed files with 24 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
ansible/roles/firewall/files/homeserver_pf.conf
View File

@@ -4,6 +4,7 @@ jail_nat_v4 = "{ 10.215.1.0/24 }"
not_jail_nat_v4 = "{ any, !10.215.1.0/24 }"
restricted_nat_v4 = "{ 10.215.2.0/24 }"
not_restricted_nat_v4 = "{ any, !10.215.2.0/24 }"
rfc1918 = "{ 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 }"
dhcp = "{ bootpc, bootps }"
allow = "{ wgh wgf }"
@@ -54,6 +55,10 @@ rdr pass on $ext_if inet proto {udp, tcp} from any to any port $unifi_ports -> 1
block log all
pass out on $ext_if
# match in on jail_nat from any to any dnpipe 1
# match in on jail_nat from any to $rfc1918 dnpipe 2
# match in on restricted_nat from any to any dnpipe 1
pass in on jail_nat
# Allow traffic from my machine to the jails/virtual machines
pass out on jail_nat from $jail_nat_v4

4
ansible/roles/firewall/files/odofreebsd_pf.conf
View File

@@ -28,8 +28,8 @@ block log all
pass out on $ext_if
pass in on jail_nat
match in on jail_nat from any to any dnpipe 1
match in on jail_nat from any to $rfc1918 dnpipe 2
# match in on jail_nat from any to any dnpipe 1
# match in on jail_nat from any to $rfc1918 dnpipe 2
# Allow traffic from my machine to the jails/virtual machines
pass out on jail_nat from $jail_nat_v4