From: Mark Wooding <mdw@distorted.org.uk>
Date: Fri, 5 Sep 2014 15:34:54 +0000 (+0100)
Subject: artist.m4: Punch a hole for Rygel service to local (-ish) devices.
X-Git-Url: https://www.chiark.greenend.org.uk/ucgi/~mdw/git/firewall/commitdiff_plain/85a49f386123c07b8078120374d2a562ad8b8df9

artist.m4: Punch a hole for Rygel service to local (-ish) devices.
---

diff --git a/artist.m4 b/artist.m4
index 8b066a7..b6a8111 100644
--- a/artist.m4
+++ b/artist.m4
@@ -46,6 +46,12 @@ run iptables -A inbound -j ACCEPT \
 	-p tcp -m multiport --destination-ports \
 		$port_netbios_ssn,$port_microsoft_ds
 
+## Open ports for Rygel.
+run iptables -A inbound -j ACCEPT -s 172.29.198.0/23 \
+	-d 239.255.255.250 -p udp --destination-port 1900
+run iptables -A INPUT -j ACCEPT -s 172.29.198.0/23 \
+	-p tcp --destination-port 9501
+
 ## Other interesting things.
 dnsresolver inbound