host_firewall: admin.tcp ports answer the admin set alone, never the geo sets

2026-10-24 08:40:31 +00:00
parent 81e7a9dc6a
commit 41dbce3641
2 changed files with 12 additions and 0 deletions
@@ -113,8 +113,18 @@ table inet host {
 {% endif %}
 {% if list(firewall.geo.tcp) %}
 		tcp dport { {{ list(firewall.geo.tcp) }} } jump geo
+{% endif %}
+{% if list(firewall.admin.tcp) %}
+		tcp dport { {{ list(firewall.admin.tcp) }} } jump admin
 {% endif %}
 	}
+{% if list(firewall.admin.tcp) %}
+
+	chain admin {
+		ip saddr @admin_v4 accept
+		ip6 saddr @admin_v6 accept
+	}
+{% endif %}

 	chain geo {
 {% if guest_ifaces %}