firewall.table.j2

2024-04-26 21:49:47 +04:00
parent ad7f4b6d13
commit 78b7d8a4a3
2 changed files with 23 additions and 6 deletions
@@ -13,11 +13,20 @@ table inet firewall {
        # icmp
        icmp type echo-request accept

+        # allow SSH + GITEA + NGINX
+        tcp dport {22, 2222, 80, 443} accept
+        
+        {%- if env.target == 'dev' %}
+        
        # allow mDNS
        udp dport mdns accept

-        # allow SSH + GITEA + NGINX
-        tcp dport {22, 2222, 80, 443} accept
+        # allow SAMBA
+        udp dport netbios-ns accept comment "Accept NetBIOS Name Service (nmbd)"
+        udp dport netbios-dgm accept comment "Accept NetBIOS Datagram Service (nmbd)"
+        tcp dport netbios-ssn accept comment "Accept NetBIOS Session Service (smbd)"
+        tcp dport microsoft-ds accept comment "Accept Microsoft Directory Service (smbd)"       
+        {%- endif %}
    }

 }