diff options
| author | Craig Jennings <c@cjennings.net> | 2026-05-31 14:01:29 -0500 |
|---|---|---|
| committer | Craig Jennings <c@cjennings.net> | 2026-05-31 14:01:29 -0500 |
| commit | 9d5be723cdfb1f84c0103210fb496881eaff23df (patch) | |
| tree | bec7d8905c8207766df7c03dadf154d4ef7e4e78 | |
| parent | 60ebd8e0b3e4b35b2f46444feffab075a43c4ef6 (diff) | |
| download | archsetup-9d5be723cdfb1f84c0103210fb496881eaff23df.tar.gz archsetup-9d5be723cdfb1f84c0103210fb496881eaff23df.zip | |
feat(firewall): open mosh UDP port range in ufw rules
archsetup installs mosh, but the ufw rule list never opened its UDP range. A fresh install or rerun leaves incoming mosh blocked until the port is added by hand. I added 60000:61000/udp to the declarative rule loop so the firewall config reproduces a working mosh setup on rebuild.
| -rwxr-xr-x | archsetup | 2 |
1 files changed, 2 insertions, 0 deletions
@@ -1283,6 +1283,7 @@ EOF "42000/tcp" "42000/udp" \ "42001/tcp" "42001/udp" \ "5353/tcp" "5353/udp" \ + "60000:61000/udp" \ "transmission" \ ; do # IMAP/IMAPS: Thunderbird email client @@ -1291,6 +1292,7 @@ EOF # 42000/tcp,udp: Warpinator file transfers # 42001/tcp,udp: Warpinator registration/auth # 5353/tcp,udp: mDNS/Avahi local network discovery + # 60000:61000/udp: mosh roaming SSH sessions # transmission: BitTorrent client action="adding ufw rule to allow $protocol" && display "task" "$action" (ufw allow "$protocol" >> "$logfile" 2>&1) || error_warn "$action" "$?" |