diff options
| author | tv <tv@shackspace.de> | 2015-06-18 21:22:21 +0200 |
|---|---|---|
| committer | tv <tv@shackspace.de> | 2015-06-18 21:22:21 +0200 |
| commit | 1325e5a6757c5825704e74b641e829c25c810124 (patch) | |
| tree | 5287e42c1a51131a6e052101c932de699f88c7c1 /modules/cd/iptables.nix | |
| parent | 94488da95f3161bc791efa7a5c4d74ce2ebfab21 (diff) | |
host cd: use irc-announce and cgit
Diffstat (limited to 'modules/cd/iptables.nix')
| -rw-r--r-- | modules/cd/iptables.nix | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/modules/cd/iptables.nix b/modules/cd/iptables.nix index 48425e8dc..950aa8472 100644 --- a/modules/cd/iptables.nix +++ b/modules/cd/iptables.nix @@ -63,6 +63,7 @@ ip4tables -A Retiolum -j ACCEPT -p icmp --icmp-type echo-request ip6tables -A Retiolum -j ACCEPT -p ipv6-icmp -m icmp6 --icmpv6-type echo-request + ipXtables -A Retiolum -j ACCEPT -p tcp --dport http -m conntrack --ctstate NEW ${when log "ipXtables -A Retiolum -j LOG --log-level info --log-prefix 'REJECT '"} ipXtables -A Retiolum -j REJECT -p tcp --reject-with tcp-reset |