ufw.sh

2023-07-23 02:24:29 +02:00
parent bdc3f04887
commit 75b21e04ab
2 changed files with 59 additions and 32 deletions
@@ -0,0 +1,44 @@
+#!/bin/sh
+set -e
+
+ZEROTIER_HJARL="172.30.0.0/255.255.0.0"
+
+ufw disable
+ufw reset
+ufw default deny incoming
+ufw default allow outgoing
+ufw allow "SSH"
+ufw allow "qBittorrent"
+ufw allow "syncthing"
+ufw allow "WWW Full"
+
+ufw allow in 10000:10100/tcp comment "generic"
+
+# docker
+ufw allow in 2376,2377,7946/tcp comment "Docker tcp"
+ufw allow in 4789,7946/udp comment "Docker udp"
+
+# multicast
+ufw allow in proto igmp to 224.0.0.0/8 comment "multicast"
+
+# zerotier
+ufw allow in 9993/udp comment "zerotier"
+ufw allow in from $ZEROTIER_HJARL comment "zerotier hjarl network"
+
+# plex
+ufw allow in 1900/udp comment "upnp service discovery"
+ufw allow in 32400/tcp comment "plex"
+ufw allow in 32410,32412:32414/udp comment "plex GDM network discovery"
+ufw allow in 32469/tcp comment "plex DLNA server"
+ufw allow in from 192.168.0.0/16 to any port 32768:61000 proto udp comment "ephemeral ports"
+
+# steam link
+ufw allow in 27036,27037/tcp comment "Steam Link tcp"
+ufw allow in 27031,27036/udp comment "Steam Link udp"
+
+# enable firewall
+ufw enable
+
+# list all firewall rules
+ufw status verbose
+