Allow sip only from voice and sipgate

2023-03-15 16:44:26 +00:00 · 2023-03-15 16:44:26 +00:00 · d030ca3242
commit d030ca3242
parent 492c1ccbc5
2 changed files with 2 additions and 4 deletions
--- a/hosts/aluminium/configuration.nix
+++ b/hosts/aluminium/configuration.nix
@ -61,6 +61,8 @@
    firewall = {
      extraCommands = ''
        iptables -A FORWARD -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu
+        iptables -I INPUT -i voice -p udp -m udp --dport 5060 -j ACCEPT
+        iptables -I INPUT -s 217.10.68.150 -p udp --dport 5060 -j ACCEPT
      '';
    };
  };