diff --git a/archi.nft b/archi.nft index 0c77b27..c2f453c 100644 --- a/archi.nft +++ b/archi.nft @@ -26,4 +26,4 @@ define range_public = 193.48.225.0/24 define ip_self_public = 193.48.225.254 define ip_radius = 10.7.0.124 - +define monitoring = 10.7.0.114 diff --git a/zones/dmz.nft b/zones/dmz.nft index 425878c..3b4329b 100644 --- a/zones/dmz.nft +++ b/zones/dmz.nft @@ -90,6 +90,7 @@ table inet firewall { ip daddr @video tcp dport { 37700, 6754 } accept ip daddr @video udp dport { 37800 } accept ip daddr @video tcp dport { 5678 } accept + ip saddr $monitoring udp dport { 161 } accept ip saddr @ldap_clients ip daddr @ldap tcp dport { 389, 636 } accept ip saddr @ldap_clients ip daddr @ldap udp dport { 636 } accept