Skip to content

Add sample for configuring nftables #856

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

WhyNotHugo
Copy link

No description provided.

@acolomb
Copy link
Member

acolomb commented Mar 14, 2024

I'm sorry nobody has reacted to your PR yet. Just guessing not many people are actually using nftables with Syncthing, and therefore your addition couldn't be verified. I for one can't judge if it will be a worthwhile change or maybe misleading to other users.

table inet filter {
chain input {
udp dport 21027 accept comment "Allow syncthing discovery"
udp dport 22000 accept comment "Allow syncthing peers"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's recommended to open both 22000/UDP and 22000/TCP in the firewall, for the default listeners.

table inet filter {
chain input {
udp dport 21027 accept comment "Allow syncthing discovery"
udp dport 22000 accept comment "Allow syncthing peers"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
udp dport 22000 accept comment "Allow syncthing peers"
udp dport 22000 accept comment "Allow syncthing peers (QUIC)"
tcp dport 22000 accept comment "Allow syncthing peers (TCP)"

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Like this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants