Allow udp to videos. Remove old rule.

This commit is contained in:
Joseph Hanson 2023-05-25 11:16:26 -05:00
parent 63ecece9e4
commit 732f5d859f
Signed by: jahanson
SSH key fingerprint: SHA256:vy6dKBECV522aPAwklFM3ReKAVB086rT3oWwiuiFG7o

View file

@ -459,13 +459,8 @@ set firewall name servers-video rule 1 description 'Rule: accept_icmp'
set firewall name servers-video rule 1 protocol 'icmp' set firewall name servers-video rule 1 protocol 'icmp'
set firewall name servers-video rule 2 action 'accept' set firewall name servers-video rule 2 action 'accept'
set firewall name servers-video rule 2 description 'Rule: accept_k8s_nodes' set firewall name servers-video rule 2 description 'Rule: accept_k8s_nodes'
set firewall name servers-video rule 2 protocol 'tcp' set firewall name servers-video rule 2 protocol 'tcp_udp'
set firewall name servers-video rule 2 source group address-group 'k8s_nodes' set firewall name servers-video rule 2 source group address-group 'k8s_nodes'
## From jellydocks --> Video
set firewall name servers-video rule 3 action 'accept'
set firewall name servers-video rule 3 description 'Rule: accept_jellydocks'
set firewall name servers-video rule 3 protocol 'tcp'
set firewall name servers-video rule 3 source address 10.1.1.14
# From SERVERS to WAN # From SERVERS to WAN
set firewall name servers-wan default-action 'accept' set firewall name servers-wan default-action 'accept'
@ -653,6 +648,11 @@ set firewall name video-local rule 2 source port '67,68'
set firewall name video-servers default-action 'drop' set firewall name video-servers default-action 'drop'
set firewall name video-servers description 'From VIDEO to SERVERS' set firewall name video-servers description 'From VIDEO to SERVERS'
set firewall name video-servers enable-default-log set firewall name video-servers enable-default-log
set firewall name video-servers rule 2 action 'accept'
set firewall name video-servers rule 2 description 'Rule: accept_k8s_nodes'
set firewall name video-servers rule 2 protocol 'udp'
set firewall name video-servers rule 2 destination group address-group 'k8s_nodes'
set firewall name video-servers rule 2 source port '6987-6989'
# From VIDEO to SERVICES # From VIDEO to SERVICES
set firewall name video-containers default-action 'accept' set firewall name video-containers default-action 'accept'