host_firewall: sources zone accepts tcp ports from listed addresses alone

2026-10-28 13:59:37 +00:00
parent c1c71194c6
commit 0abc9fb1c3
2 changed files with 10 additions and 0 deletions
@@ -18,6 +18,8 @@ firewall:
    tcp: {}
    v4: {}
    v6: {}
+  # Ports accepted from the listed addresses alone: name -> {tcp: ports, v4: addresses, v6: addresses}, each a map as above.
+  sources: {}
  # Metrics scrapers: on wt0 only these source addresses reach the listed tcp
  # ports (the vpn zone applies to every peer). Rendered only when both are set.
  scrapers: