JakeHillion/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #32540 from rnhmjoj/portrange

Browse Source 
nixos/doc: document the firewall port ranges options
This commit is contained in:
Orivej Desh 2017-12-20 23:51:08 +00:00 committed by GitHub
commit b679079045
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
nixos/doc/manual/configuration/firewall.xml
View File

@ -23,10 +23,23 @@ networking.firewall.allowedTCPPorts = [ 80 443 ];
</programlisting> </programlisting>
Note that TCP port 22 (ssh) is opened automatically if the SSH daemon Note that TCP port 22 (ssh) is opened automatically if the SSH daemon
is enabled (<option>services.openssh.enable = true</option>). UDP is enabled (<option>services.openssh.enable = true</option>). UDP
ports can be opened through ports can be opened through
<option>networking.firewall.allowedUDPPorts</option>. Also of <option>networking.firewall.allowedUDPPorts</option>.</para>
interest is
<para>To open ranges of TCP ports:
<programlisting>
networking.firewall.allowedTCPPortRanges = [
{ from = 4000; to = 4007; }
{ from = 8000; to = 8010; }
];
</programlisting>
Similarly, UDP port ranges can be opened through
<option>networking.firewall.allowedUDPPortRanges</option>.</para>
<para>Also of interest is
<programlisting> <programlisting>
networking.firewall.allowPing = true; networking.firewall.allowPing = true;