From c868cff63b120e034e5bd418959039ccb210ca52 Mon Sep 17 00:00:00 2001
From: tv <tv@krebsco.de>
Date: Thu, 18 Jun 2015 21:22:21 +0200
Subject: host cd: use irc-announce and cgit

---
 modules/cd/iptables.nix | 1 +
 1 file changed, 1 insertion(+)

(limited to 'modules/cd/iptables.nix')

diff --git a/modules/cd/iptables.nix b/modules/cd/iptables.nix
index 48425e8..950aa84 100644
--- a/modules/cd/iptables.nix
+++ b/modules/cd/iptables.nix
@@ -63,6 +63,7 @@
           ip4tables -A Retiolum -j ACCEPT -p icmp --icmp-type echo-request
           ip6tables -A Retiolum -j ACCEPT -p ipv6-icmp -m icmp6 --icmpv6-type echo-request
 
+          ipXtables -A Retiolum -j ACCEPT -p tcp --dport http -m conntrack --ctstate NEW
 
           ${when log "ipXtables -A Retiolum -j LOG --log-level info --log-prefix 'REJECT '"}
           ipXtables -A Retiolum -j REJECT -p tcp --reject-with tcp-reset
-- 
cgit v1.2.3