aboutsummaryrefslogtreecommitdiff
path: root/hosts/sagittarius/network.nix
diff options
context:
space:
mode:
Diffstat (limited to 'hosts/sagittarius/network.nix')
-rw-r--r--hosts/sagittarius/network.nix2
1 files changed, 2 insertions, 0 deletions
diff --git a/hosts/sagittarius/network.nix b/hosts/sagittarius/network.nix
index 32362e6..1b41783 100644
--- a/hosts/sagittarius/network.nix
+++ b/hosts/sagittarius/network.nix
@@ -47,6 +47,8 @@
icmp type echo-request accept comment "allow ping"
icmpv6 type != { nd-redirect, 139 } accept comment "Accept all ICMPv6 messages except redirects and node information queries (type 139). See RFC 4890, section 4.4."
ip6 daddr fe80::/64 udp dport 546 accept comment "DHCPv6 client"
+
+ udp dport 53 meta mark 42 accept comment "allow DNS over wireguard"
}
'';
};