* NEW setfilter now sets nat table

[lab.git] / iptables / ufw / after.rules

diff --git a/iptables/ufw/after.rules b/iptables/ufw/after.rules
index 37fc6e7..f98d8f1 100644 (file)
--- a/iptables/ufw/after.rules
+++ b/iptables/ufw/after.rules
@@ -15,6 +15,12 @@
 :ufw-after-forward - [0:0]
 # End required lines
 
+## allow connections to the local services from WAN
+# ssh 22/tcp
+-A ufw-after-input -p tcp --syn -m state --state NEW --dport 22 -j ACCEPT
+# https 443/tcp
+-A ufw-after-input -p tcp --syn -m state --state NEW --dport 443 -j ACCEPT
+
 # don't log noisy services by default
 -A ufw-after-input -p udp --dport 137 -j RETURN
 -A ufw-after-input -p udp --dport 138 -j RETURN