Deploy nftables conf

FedericoCeratto · FedericoCeratto · commit ca65e0744a81 · 2023-09-12T10:21:14.000+02:00
diff --git a/stun/debian/control b/stun/debian/control
@@ -15,6 +15,7 @@ Package: ooni-stun
 Architecture: all
 Depends: ${misc:Depends},
  ${python3:Depends},
+ nftables,
  python3-setuptools,
  python3-statsd,
  python3-systemd,
diff --git a/stun/debian/install b/stun/debian/install
@@ -1,2 +1,3 @@
 debian/ooni-stun.service /lib/systemd/system/
+debian/udp_3478.nft /etc/ooni/nftables/udp_3478.nft
 ooni-stun.py /usr/bin/
diff --git a/stun/debian/udp_3478.nft b/stun/debian/udp_3478.nft
@@ -0,0 +1,2 @@
+# Deployed as /etc/ooni/nftables/udp_3478.nft by the ooni-stun deb package
+add rule inet filter input udp dport 3478 counter accept comment "Incoming STUN"

Original file line number	Diff line number	Diff line change
`@@ -1,2 +1,3 @@`
`1`	`1`	`debian/ooni-stun.service /lib/systemd/system/`
	`2`	`+debian/udp_3478.nft /etc/ooni/nftables/udp_3478.nft`
`2`	`3`	`ooni-stun.py /usr/bin/`
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+# Deployed as /etc/ooni/nftables/udp_3478.nft by the ooni-stun deb package`
	`2`	`+add rule inet filter input udp dport 3478 counter accept comment "Incoming STUN"`