Skip to content

Conversation

WhyNotHugo
Copy link

No description provided.

@acolomb
Copy link
Member

acolomb commented Mar 14, 2024

I'm sorry nobody has reacted to your PR yet. Just guessing not many people are actually using nftables with Syncthing, and therefore your addition couldn't be verified. I for one can't judge if it will be a worthwhile change or maybe misleading to other users.

table inet filter {
chain input {
udp dport 21027 accept comment "Allow syncthing discovery"
udp dport 22000 accept comment "Allow syncthing peers"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It's recommended to open both 22000/UDP and 22000/TCP in the firewall, for the default listeners.

table inet filter {
chain input {
udp dport 21027 accept comment "Allow syncthing discovery"
udp dport 22000 accept comment "Allow syncthing peers"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
udp dport 22000 accept comment "Allow syncthing peers"
udp dport 22000 accept comment "Allow syncthing peers (QUIC)"
tcp dport 22000 accept comment "Allow syncthing peers (TCP)"

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Like this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants