Compare commits

...

1 Commits

Author SHA1 Message Date
RadekSabacky 1cfb0a2d4a / move uwf rules into iptables 2025-11-20 14:28:44 +01:00
2 changed files with 5 additions and 19 deletions
@@ -591,6 +591,8 @@ apply_port_allowlist() {
["GroupWise"]="1677"
["PPTP"]="1723"
["RTSPAlt"]="1755"
["Nym specific"]="1789"
["Nym specific"]="1790"
["MSNP"]="1863"
["NFS"]="2049"
["CPanel"]="2082-2083"
@@ -609,6 +611,7 @@ apply_port_allowlist() {
["AndroidMarket"]="5228"
["PostgreSQL"]="5432"
["MongoDBDefault"]="27017"
["Nym-node-api"]="8080"
["Electrum"]="8082"
["SimplifyMedia"]="8087-8088"
["Zcash"]="8232-8233"
@@ -617,6 +620,7 @@ apply_port_allowlist() {
["TeamSpeak"]="8767"
["MQTTS"]="8883"
["HTTPProxy"]="8888"
["Nym Specific"]="9000"
["TorORPort"]="9001"
["TorDirPort"]="9030"
["Tari"]="9053"
@@ -637,6 +641,7 @@ apply_port_allowlist() {
["ElectrumSSL"]="50002"
["MOSH"]="60000-61000"
["Mumble"]="64738"
["WireGuard"]="51822"
["Metadata"]="51830"
)
@@ -11,22 +11,3 @@ echo -e "\n* * * Installing needed prerequisities * * *"
apt update -y && apt --fix-broken install
apt upgrade
apt install apt ca-certificates jq curl wget ufw jq tmux pkg-config build-essential libssl-dev git ntp ntpdate neovim tree tmux tig nginx -y
apt install ufw --fix-missing
# enable & setup firewall
echo -e "\n* * * Setting up firewall using ufw * * * "
echo "Please enable the firewall in the next prompt for node proper routing."
echo
ufw enable
ufw allow 22/tcp # SSH - you're in control of these ports
ufw allow 80/tcp # HTTP
ufw allow 443/tcp # HTTPS
ufw allow 1789/tcp # Nym specific
ufw allow 1790/tcp # Nym specific
ufw allow 8080/tcp # Nym specific - nym-node-api
ufw allow 9000/tcp # Nym Specific - clients port
ufw allow 9001/tcp # Nym specific - wss port
ufw allow 51822/udp # WireGuard
ufw allow in on nymwg to any port 51830 proto tcp # bandwidth queries/topup - inside the tunnel
ufw reload && \
ufw status