[GH-ISSUE #67] Add instructions / notes regarding firewall setup #24

New issue

Open

opened 2026-03-13 15:24:10 +03:00 by kerem · 1 comment

kerem commented

2026-03-13 15:24:10 +03:00

Owner

Originally created by @joohoi on GitHub (Apr 8, 2018).
Original GitHub issue: https://github.com/acme-dns/acme-dns/issues/67

As noted by @jvanasco in https://github.com/joohoi/acme-dns/pull/64#issuecomment-377645243

Originally created by @joohoi on GitHub (Apr 8, 2018). Original GitHub issue: https://github.com/acme-dns/acme-dns/issues/67 As noted by @jvanasco in https://github.com/joohoi/acme-dns/pull/64#issuecomment-377645243

kerem added the

Documentation

label

2026-03-13 15:24:10 +03:00

kerem commented

2026-03-13 15:24:21 +03:00

Author

Owner

@jvanasco commented on GitHub (Apr 10, 2018):

FYI I ended up handling port53 toggling via iptables and a custom acme-dns chain as suggested to me in a serverfault Q&A.

After a bit of fiddling, the top of the output from my iptables-save (and iptables-restore) looks roughly like this:

:INPUT DROP [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [451:186415]
:acme-dns - [0:0]
    ... other chains ...
-A INPUT -j acme-dns

This line to create the chain...

:acme-dns - [0:0]

...is essentially the same as:

iptables -N acme-dns

And this line

-A INPUT -j acme-dns

...is the same as

iptables -A INPUT -j acme-dns

I decided to handle this via save/restore because I didn't know how to better position the routes.

When running acme-dns, i open the ports via:

iptables -A acme-dns -p tcp --dport 53 -j ACCEPT
iptables -A acme-dns -p udp --dport 53 -j ACCEPT
iptables -A acme-dns -p tcp --dport 8011 -j ACCEPT

And when shutting it off, I just clear out the entire rule

iptables -F acme-dns

@jvanasco commented on GitHub (Apr 10, 2018): FYI I ended up handling port53 toggling via `iptables` and a custom acme-dns chain as suggested to me in a serverfault Q&A. After a bit of fiddling, the top of the output from my `iptables-save` (and iptables-restore) looks roughly like this: :INPUT DROP [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [451:186415] :acme-dns - [0:0] ... other chains ... -A INPUT -j acme-dns This line to create the chain... :acme-dns - [0:0] ...is essentially the same as: iptables -N acme-dns And this line -A INPUT -j acme-dns ...is the same as iptables -A INPUT -j acme-dns I decided to handle this via save/restore because I didn't know how to better position the routes. When running acme-dns, i open the ports via: iptables -A acme-dns -p tcp --dport 53 -j ACCEPT iptables -A acme-dns -p udp --dport 53 -j ACCEPT iptables -A acme-dns -p tcp --dport 8011 -j ACCEPT And when shutting it off, I just clear out the entire rule iptables -F acme-dns

kerem referenced this issue

2026-03-13 16:13:35 +03:00

[PR #24] [MERGED] Fail on malformed JSON payloads in register endpoint #248