Compare commits

...

1 Commits

Author SHA1 Message Date
RadekSabacky 1cfb0a2d4a / move uwf rules into iptables 2025-11-20 14:28:44 +01:00
2 changed files with 5 additions and 19 deletions
@@ -591,6 +591,8 @@ apply_port_allowlist() {
["GroupWise"]="1677" ["GroupWise"]="1677"
["PPTP"]="1723" ["PPTP"]="1723"
["RTSPAlt"]="1755" ["RTSPAlt"]="1755"
["Nym specific"]="1789"
["Nym specific"]="1790"
["MSNP"]="1863" ["MSNP"]="1863"
["NFS"]="2049" ["NFS"]="2049"
["CPanel"]="2082-2083" ["CPanel"]="2082-2083"
@@ -609,6 +611,7 @@ apply_port_allowlist() {
["AndroidMarket"]="5228" ["AndroidMarket"]="5228"
["PostgreSQL"]="5432" ["PostgreSQL"]="5432"
["MongoDBDefault"]="27017" ["MongoDBDefault"]="27017"
["Nym-node-api"]="8080"
["Electrum"]="8082" ["Electrum"]="8082"
["SimplifyMedia"]="8087-8088" ["SimplifyMedia"]="8087-8088"
["Zcash"]="8232-8233" ["Zcash"]="8232-8233"
@@ -617,6 +620,7 @@ apply_port_allowlist() {
["TeamSpeak"]="8767" ["TeamSpeak"]="8767"
["MQTTS"]="8883" ["MQTTS"]="8883"
["HTTPProxy"]="8888" ["HTTPProxy"]="8888"
["Nym Specific"]="9000"
["TorORPort"]="9001" ["TorORPort"]="9001"
["TorDirPort"]="9030" ["TorDirPort"]="9030"
["Tari"]="9053" ["Tari"]="9053"
@@ -637,6 +641,7 @@ apply_port_allowlist() {
["ElectrumSSL"]="50002" ["ElectrumSSL"]="50002"
["MOSH"]="60000-61000" ["MOSH"]="60000-61000"
["Mumble"]="64738" ["Mumble"]="64738"
["WireGuard"]="51822"
["Metadata"]="51830" ["Metadata"]="51830"
) )
@@ -11,22 +11,3 @@ echo -e "\n* * * Installing needed prerequisities * * *"
apt update -y && apt --fix-broken install apt update -y && apt --fix-broken install
apt upgrade apt upgrade
apt install apt ca-certificates jq curl wget ufw jq tmux pkg-config build-essential libssl-dev git ntp ntpdate neovim tree tmux tig nginx -y apt install apt ca-certificates jq curl wget ufw jq tmux pkg-config build-essential libssl-dev git ntp ntpdate neovim tree tmux tig nginx -y
apt install ufw --fix-missing
# enable & setup firewall
echo -e "\n* * * Setting up firewall using ufw * * * "
echo "Please enable the firewall in the next prompt for node proper routing."
echo
ufw enable
ufw allow 22/tcp # SSH - you're in control of these ports
ufw allow 80/tcp # HTTP
ufw allow 443/tcp # HTTPS
ufw allow 1789/tcp # Nym specific
ufw allow 1790/tcp # Nym specific
ufw allow 8080/tcp # Nym specific - nym-node-api
ufw allow 9000/tcp # Nym Specific - clients port
ufw allow 9001/tcp # Nym specific - wss port
ufw allow 51822/udp # WireGuard
ufw allow in on nymwg to any port 51830 proto tcp # bandwidth queries/topup - inside the tunnel
ufw reload && \
ufw status