diff options
Diffstat (limited to 'nixos/doc/manual/configuration/firewall.xml')
| -rw-r--r-- | nixos/doc/manual/configuration/firewall.xml | 15 |
1 files changed, 4 insertions, 11 deletions
diff --git a/nixos/doc/manual/configuration/firewall.xml b/nixos/doc/manual/configuration/firewall.xml index 47a19ac82c0fe..fbed9ac7c951d 100644 --- a/nixos/doc/manual/configuration/firewall.xml +++ b/nixos/doc/manual/configuration/firewall.xml @@ -6,21 +6,15 @@ <title>Firewall</title> <para> - NixOS has a simple stateful firewall that blocks incoming connections and - other unexpected packets. The firewall applies to both IPv4 and IPv6 traffic. - It is enabled by default. It can be disabled as follows: + NixOS has a simple stateful firewall that blocks incoming connections and other unexpected packets. The firewall applies to both IPv4 and IPv6 traffic. It is enabled by default. It can be disabled as follows: <programlisting> <xref linkend="opt-networking.firewall.enable"/> = false; </programlisting> - If the firewall is enabled, you can open specific TCP ports to the outside - world: + If the firewall is enabled, you can open specific TCP ports to the outside world: <programlisting> <xref linkend="opt-networking.firewall.allowedTCPPorts"/> = [ 80 443 ]; </programlisting> - Note that TCP port 22 (ssh) is opened automatically if the SSH daemon is - enabled (<option><xref linkend="opt-services.openssh.enable"/> = - true</option>). UDP ports can be opened through - <xref linkend="opt-networking.firewall.allowedUDPPorts"/>. + Note that TCP port 22 (ssh) is opened automatically if the SSH daemon is enabled (<option><xref linkend="opt-services.openssh.enable"/> = true</option>). UDP ports can be opened through <xref linkend="opt-networking.firewall.allowedUDPPorts"/>. </para> <para> @@ -31,7 +25,6 @@ { from = 8000; to = 8010; } ]; </programlisting> - Similarly, UDP port ranges can be opened through - <xref linkend="opt-networking.firewall.allowedUDPPortRanges"/>. + Similarly, UDP port ranges can be opened through <xref linkend="opt-networking.firewall.allowedUDPPortRanges"/>. </para> </section> |