| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114 |
- ---
- firewall:
- tailscale: true
- bgp:
- - interface: sernet
- addresses:
- - fe80::3947:1
- - interface: highdef
- addresses:
- - fe80::1080:38
- - interface: alan
- addresses:
- - fe80::2025
- - interface: winter
- addresses:
- - fd4e:d0:d38d::2
- - interface: cmcc
- addresses:
- - fe80::1686
- - interface: cdubs
- addresses:
- - fe80::566:21
- - interface: goforcex
- addresses:
- - fe80::1719
- rules:
- # Allow DNS
- - meta l4proto { tcp, udp } th dport 53 counter accept
- # Allow Whois from dnet
- - tcp dport 43 ip saddr @dnet_ipv4 counter accept
- - tcp dport 43 ip6 saddr @dnet_ipv6 counter accept
- # Allow HTTP
- - tcp dport { 80, 443 } counter accept
- # Tor
- - meta l4proto { tcp, udp } th dport 1991 counter accept
- - meta l4proto { tcp, udp } th dport 1992 counter accept
- # Alfis
- - tcp dport 4244 counter accept
- # I2P
- - meta l4proto { tcp, udp } th dport 13249 counter accept
- # wireguard and fastd ports are automatically opened
- rc:
- own_interfaces:
- - routercity
- interfaces:
- - p2pnode
- - p2prouter
- - aurora
- - palerme
- - sobinka
- - laplace
- - stricker
- - trolljaeger
- - silvermoon
- - frostwood
- - beastwarden
- dnet:
- own_interfaces:
- - crxn
- - dn42
- - neo
- - dns
- - dn42-myip
- interfaces:
- - p2pnode
- - p2prouter
- - aurora
- - palerme
- - sobinka
- - laplace
- - stricker
- - trolljaeger
- - dnrefugee
- - atolm
- - aurora
- - koala
- - gload
- - alioth
- - kskb42
- - jerryxiao
- - kuu
- - whojk
- - cooo
- - lantian
- - kskbneo
- - kskbtw
- - melty
- - theresa
- - kskbjp
- - neoas
- - kennhuang
- - highdef
- - xys21
- - lapis
- - nisb
- - potato
- - tech9
- - rhm
- - sunnet
- - yuuta
- - sernet
- - pravda1
- - pravda2
- - alan
- - winter
- - silvermoon
- - frostwood
- - cmcc
- - beastwarden
- - cdubs
- - goforcex
|
