Deploy nftables conf

ooni · Sep 12, 2023 · ca65e07 · ca65e07
1 parent 45a7434
commit ca65e07
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 0 deletions.
diff --git a/stun/debian/control b/stun/debian/control
@@ -15,6 +15,7 @@ Package: ooni-stun
 Architecture: all
 Depends: ${misc:Depends},
  ${python3:Depends},
+ nftables,
  python3-setuptools,
  python3-statsd,
  python3-systemd,

diff --git a/stun/debian/install b/stun/debian/install
@@ -1,2 +1,3 @@
 debian/ooni-stun.service /lib/systemd/system/
+debian/udp_3478.nft /etc/ooni/nftables/udp_3478.nft
 ooni-stun.py /usr/bin/
diff --git a/stun/debian/udp_3478.nft b/stun/debian/udp_3478.nft
@@ -0,0 +1,2 @@
+# Deployed as /etc/ooni/nftables/udp_3478.nft by the ooni-stun deb package
+add rule inet filter input udp dport 3478 counter accept comment "Incoming STUN"
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		# Deployed as /etc/ooni/nftables/udp_3478.nft by the ooni-stun deb package
		add rule inet filter input udp dport 3478 counter accept comment "Incoming STUN"