From 16513e79baa67dcaadaf45413baf7b22768d1248 Mon Sep 17 00:00:00 2001
From: DIL5 <linse-dil5@psi.ch>
Date: Tue, 4 Aug 2026 11:13:12 +0200
Subject: [PATCH] add SECoP udp port 10767 to firewall

---
 utils.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/utils.py b/utils.py
index 33c45b0..779cbd1 100644
--- a/utils.py
+++ b/utils.py
@@ -29,6 +29,7 @@ table inet filter {
 
     # activate the following line to accept common local services
     tcp dport { %s } ct state new accept
+    udp dport { 10767 } ct state new accept
 
     # ICMPv6 packets which must not be dropped, see https://tools.ietf.org/html/rfc4890#section-4.4.1
     meta nfproto ipv6 icmpv6 type { destination-unreachable, packet-too-big, time-exceeded, parameter-problem, echo-reply, echo-request, nd-router-solicit, nd-router-advert, nd-neighbor-solicit, nd-neighbor-advert, 148, 149 } accept