jolheiser/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6c62de6a31
nixpkgs/modules/services/networking
History
Mathijs Kwik 6c62de6a31 firewall: option to enable the rpfilter netfilter module 
This is meant to replace /proc/sys/net/ipv4/conf/*/rp_filter, which
only works for ipv4. Furthermore, it's nicer to handle this kind of
filtering in the firewall.

There are some more subtle differences, please see:
https://home.regit.org/netfilter-en/secure-use-of-helpers/

I chose to enable this by default (when the firewall is enabled) as
it's a good idea in general. Only people with advanced routing needs
might not want this, but I guess they don't use the nixos firewall
anyway and use a custom solution. Furthermore, the option only becomes
available in kernel 3.3+, so conservative nixos users that just stick
to the default kernel will not need to act now just yet.
2012-10-13 09:59:31 +02:00
..
ircd-hybrid renamed "all-interfaces" to "networking" 2012-03-04 18:44:42 +00:00
ssh Global replace /var/run/current-system -> /run/current-system 2012-07-16 11:34:21 -04:00
amuled.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
avahi-daemon.nix avahi: Never set host-name' to the empty string in avahi-daemon.conf'. 2012-09-07 10:58:53 +02:00
bind.nix Use a dedicated user ('named') for BIND instead of running the daemon as super user. 2012-07-27 00:08:41 +02:00
bitlbee.nix BitlBee: Add `job.name'; cleanup white space. 2012-03-12 13:10:13 +00:00
cntlm.nix * Don't include the hostname in option default values. Default values 2012-06-08 14:29:31 +00:00
ddclient.nix * Use boot.kernelModules everywhere instead of explicit calls to 2012-03-17 17:26:17 +00:00
dhclient.nix * Revert r33928: veth* can also be a bridged interface requiring dhcp. 2012-04-30 17:46:11 +00:00
dhcpcd.nix Added 'networking.dhcpcd.denyInterfaces' to extend the list of network 2012-05-08 11:46:01 +00:00
dhcpd.nix * Change all the startOn / stopOn attributes to the Upstart 0.6 syntax 2009-11-06 22:19:17 +00:00
dnsmasq.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
ejabberd.nix ejabberd: tabs->spaces, remove trailing whitespace 2011-02-16 21:03:14 +00:00
firewall.nix firewall: option to enable the rpfilter netfilter module 2012-10-13 09:59:31 +02:00
flashpolicyd.nix * Add a module for a Flash policy server. 2011-09-15 15:13:46 +00:00
git-daemon.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
gnunet.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
gogoclient.nix gogoclient: setup config and dirs on service start, not on system activation 2012-07-31 20:07:05 +02:00
gvpe.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
ifplugd.nix * Fix incorrect default value. 2012-02-20 16:53:44 +00:00
nat.nix nat: enable NAT for multiple networks 2012-10-09 14:00:59 -04:00
networkmanager.nix network-manager: Big overhaul 2012-09-27 09:26:07 +02:00
ntpd.nix * Use boot.kernelModules everywhere instead of explicit calls to 2012-03-17 17:26:17 +00:00
oidentd.nix * Added a module for oidentd. 2011-11-10 23:06:24 +00:00
openfire.nix renamed "all-interfaces" to "networking" 2012-03-04 18:44:42 +00:00
openvpn.nix * Allow the start/stop condition of OpenVPN jobs to be overriden 2012-02-28 10:30:12 +00:00
portmap.nix * Provide two utility functions in Upstart jobs: "ensure JOBNAME" 2012-03-17 19:12:33 +00:00
prayer.nix Fix prayer so it does not start a server at port 80. 2012-06-10 14:51:43 +00:00
privoxy.nix * Use boot.kernelModules everywhere instead of explicit calls to 2012-03-17 17:26:17 +00:00
quassel.nix Quassel: fix package name 2011-10-31 12:48:59 +00:00
radvd.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
rdnssd.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
rpcbind.nix Changing portmap by rpcbind on nfs services. 2012-03-21 20:37:37 +00:00
sabnzbd.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
tftpd.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
unbound.nix Adding extraConfig to unbound 2011-11-03 18:49:54 +00:00
vsftpd.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
wakeonlan.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
wicd.nix strip trailing whitespace; no functional change 2011-09-14 18:20:50 +00:00
wpa_supplicant.nix modules/services/networking/wpa_supplicant.nix: strip trailing whitespace 2012-06-29 11:53:16 +02:00
xinetd.nix Some additional xinetd settings. 2012-04-19 08:28:54 +00:00