various minor fixes

[distro-setup] / transmission-firewall / netns.rules

diff --git a/transmission-firewall/netns.rules b/transmission-firewall/netns.rules
index a8c8c2c819eacde380cf47a15e585af7fa2a28e2..f0a37f774e1cf5d8808f14d245aace419b5e0b45 100644 (file)
--- a/transmission-firewall/netns.rules
+++ b/transmission-firewall/netns.rules
@@ -33,9 +33,14 @@
 -A INPUT -p tcp -m tcp --dport 9091 -j ACCEPT
 
 # 1195 is used for the secondary vpn server
--A OUTPUT -p udp -m udp --dport 1194:1195 -j ACCEPT
--A INPUT -p udp -m udp --sport 1194:1195 -j ACCEPT
+# 1198 is another vpn port, simpler syntax just to use range
+-A OUTPUT -p udp -m udp --dport 1194:1198 -j ACCEPT
+-A INPUT -p udp -m udp --sport 1194:1198 -j ACCEPT
 
 -A OUTPUT -o tun0 -j ACCEPT
 -A INPUT -i tun0 -j ACCEPT
+
+# makes debugging things easier
+-A INPUT -p icmp -j ACCEPT
+-A OUTPUT -p icmp -j ACCEPT
 COMMIT