···

       
22
       
22
       
 
       
    networking.firewall = {

     

       
23
       
23
       
 
       
      enable = true;

     

       
24
       
24
       
 
       


     

       
25
       
25
       
-
       
      # TIP: Locally redirect ports with socat

     

       
25
       
25
       
+
       
      # TIP: locally redirect ports with socat

     

       
26
       
26
       
 
       
      # socat tcp-listen:4242,reuseaddr,fork tcp:localhost:8000

     

       
27
       
27
       
 
       


     

       
28
       
28
       
 
       
      # Open arbitrary ports to share things on local networks

     

       
29
       
29
       
 
       
      allowedTCPPorts = [ 4242 ];

     

       
30
       
30
       
 
       
      allowedTCPPortRanges = [

     

       
31
       
31
       
+
       
        { from = 42420; to = 42429; }

     

       
32
       
32
       
+
       
      ];

     

       
33
       
33
       
+
       
      allowedUDPPorts = [ 4242 ];

     

       
34
       
34
       
+
       
      allowedUDPPortRanges = [

     

       
31
       
35
       
 
       
        { from = 42420; to = 42429; }

     

       
32
       
36
       
 
       
      ];

     

       
33
       
37