iptables: fix portrange usage

This commit is contained in:
lassulus 2024-09-25 17:28:58 +02:00
parent bccbc3f313
commit ceccc167d2

View File

@ -108,12 +108,12 @@ let
}) })
({ ({
krebs.iptables.tables.filter.INPUT.rules = map krebs.iptables.tables.filter.INPUT.rules = map
(portRange: { predicate = "-p tcp --dport ${toString port.from}:${toString port.to}"; target = "ACCEPT"; }) (portRange: { predicate = "-p tcp --dport ${toString portRange.from}:${toString portRange.to}"; target = "ACCEPT"; })
config.networking.firewall.allowedTCPPortRanges; config.networking.firewall.allowedTCPPortRanges;
}) })
({ ({
krebs.iptables.tables.filter.INPUT.rules = map krebs.iptables.tables.filter.INPUT.rules = map
(portRange: { predicate = "-p udp --dport ${toString port.from}:${toString port.to}"; target = "ACCEPT"; }) (portRange: { predicate = "-p udp --dport ${toString portRange.from}:${toString portRange.to}"; target = "ACCEPT"; })
config.networking.firewall.allowedUDPPortRanges; config.networking.firewall.allowedUDPPortRanges;
}) })
({ ({