Compare commits
2 commits
11afd23d99
...
264d64526c
Author | SHA1 | Date | |
---|---|---|---|
264d64526c | |||
a88c13b4f6 |
2 changed files with 6 additions and 2 deletions
|
@ -43,6 +43,7 @@
|
||||||
less
|
less
|
||||||
killall
|
killall
|
||||||
screen
|
screen
|
||||||
|
inetutils
|
||||||
];
|
];
|
||||||
|
|
||||||
users.users.jaina = {
|
users.users.jaina = {
|
||||||
|
|
|
@ -3,8 +3,11 @@
|
||||||
{
|
{
|
||||||
networking.firewall.extraCommands = let user = config.services.postfix.user;
|
networking.firewall.extraCommands = let user = config.services.postfix.user;
|
||||||
in ''
|
in ''
|
||||||
iptables -I OUTPUT -m owner ! --uid-owner ${user} -m tcp -p tcp --dport 25 -j REJECT --reject-with icmp-admin-prohibited
|
iptables -A OUTPUT -m owner ! --uid-owner ${user} -m tcp -p tcp --dport 25 -j REJECT --reject-with icmp-admin-prohibited
|
||||||
ip6tables -I OUTPUT -m owner ! --uid-owner ${user} -m tcp -p tcp --dport 25 -j REJECT --reject-with icmp6-adm-prohibited
|
ip6tables -A OUTPUT -m owner ! --uid-owner ${user} -m tcp -p tcp --dport 25 -j REJECT --reject-with icmp6-adm-prohibited
|
||||||
|
|
||||||
|
iptables -I OUTPUT -m tcp -p tcp --dport 25 -d 127.0.0.1 -j ACCEPT
|
||||||
|
ip6tables -I OUTPUT -m tcp -p tcp --dport 25 -d 127.0.0.1 -j ACCEPT
|
||||||
'';
|
'';
|
||||||
|
|
||||||
services.postfix = {
|
services.postfix = {
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue