add firewall reject instead of drop

2015-07-29 15:50:37 +02:00 · 2015-07-29 15:50:37 +02:00 · 65d7989049
commit 65d7989049
parent d516f329da
1 changed files with 1 additions and 0 deletions
--- a/makefu/1systems/pnp.nix
+++ b/makefu/1systems/pnp.nix
@ -40,6 +40,7 @@

 # networking.firewall is enabled by default
  networking.firewall.allowedTCPPorts = [ 80 ];
+  networking.firewall.rejectPackets = true;
  networking.firewall.allowPing = true;

  fileSystems."/" =