host_firewall: admin.tcp ports answer the admin set alone, never the geo sets

2026-10-24 08:40:31 +00:00
parent 81e7a9dc6a
commit 41dbce3641
2 changed files with 12 additions and 0 deletions
@@ -13,7 +13,9 @@ firewall:
  vpn:
    tcp: {}
    udp: {}
+  # tcp: ports accepted from the admin set alone, never from the geo sets.
  admin:
+    tcp: {}
    v4: {}
    v6: {}
  # Metrics scrapers: on wt0 only these source addresses reach the listed tcp