talexander/machine_setup
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add jail for momlaptop.

Browse Source
This commit is contained in:
Tom Alexander
2024-08-14 21:25:49 -04:00
parent 20768edcf6
commit aec97a5df6
30 changed files with 344 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ansible/roles/firewall/files/homeserver_pf.conf
View File

@@ -51,6 +51,10 @@ nat pass on jail_nat proto {tcp, udp} from any to 10.215.1.216 port 22 -> 10.215
# rdr pass on $ext_if inet proto {tcp, udp} from any to any port 65022 -> 10.213.177.8 port 22
rdr pass on $ext_if inet proto {udp, tcp} from any to any port $unifi_ports -> 10.215.1.202
# -> momlaptop
rdr pass on $ext_if inet proto {tcp, udp} from $not_jail_nat_v4 to any port 8033 -> 10.215.1.218 port 443
nat pass on jail_nat proto {tcp, udp} from any to 10.215.1.218 port 443 -> 10.215.1.1
# filtering
# match in on jail_nat from any to any dnpipe(1, 2)
# match in on restricted_nat from any to any dnpipe(1, 2)