Firewall

Pour activer les règles

sudo ufw allow proto tcp from 192.168.1.0/26 to any port 443
sudo ufw allow proto tcp from 192.168.1.0/26 to any port 22
sudo ufw allow proto tcp from 192.168.1.0/26 to any port 2222
sudo ufw allow from 192.168.1.0/26 to any port 3306
sudo ufw allow from 192.168.1.0/26 to any port 3000
sudo ufw allow from 192.168.1.0/26 to any port 2049

les ports:

3306: mysql
2049: nfs
3000: gitea
2222: gitea ssh

Pour activer le firewall

sudo ufw enable

Règles actuelles

admin@cahute:~$ sudo ufw status numbered
Status: active
     To                         Action      From
     --                         ------      ----
[ 1] 443/tcp                    ALLOW IN    192.168.1.0/26            
[ 2] 22/tcp                     ALLOW IN    192.168.1.0/26            
[ 3] 3306                       ALLOW IN    192.168.1.0/26            
[ 4] 2049                       ALLOW IN    192.168.1.0/26            
[ 5] 3000                       ALLOW IN    192.168.1.0/26            
[ 6] 2200/tcp                   ALLOW IN    Anywhere                  
[ 7] 2222/tcp                   ALLOW IN    Anywhere                  
[ 8] 389                        ALLOW IN    Anywhere                  
[ 9] 2200/tcp (v6)              ALLOW IN    Anywhere (v6)             
[10] 2222/tcp (v6)              ALLOW IN    Anywhere (v6)             
[11] 389 (v6)                   ALLOW IN    Anywhere (v6)