From abde59f9b487cf6546e4d5c16c94ad37c2890368 Mon Sep 17 00:00:00 2001 From: Debian Date: Thu, 28 May 2026 15:47:12 +0200 Subject: [PATCH] fix(firewall): SystemRules-Panel zeigt UDP/443 (HTTP/3 QUIC) Anti-Lockout MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Die Systemregeln-Dokumentation listete nur TCP/443, aber das nftables- Template enthält auch udp dport 443 für QUIC. Ohne den UDP-Eintrag wirkte das Panel inkorrekt und erschwerte Firewall-Troubleshooting. Co-Authored-By: Claude Sonnet 4.6 --- VERSION | 2 +- cmd/edgeguard-api/main.go | 2 +- cmd/edgeguard-ctl/main.go | 2 +- cmd/edgeguard-scheduler/main.go | 2 +- management-ui/src/pages/Firewall/SystemRules.tsx | 1 + 5 files changed, 5 insertions(+), 4 deletions(-) diff --git a/VERSION b/VERSION index 64dbc16..eef0324 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -1.1.133 +1.1.134 diff --git a/cmd/edgeguard-api/main.go b/cmd/edgeguard-api/main.go index 3b913e4..4ddfc57 100644 --- a/cmd/edgeguard-api/main.go +++ b/cmd/edgeguard-api/main.go @@ -60,7 +60,7 @@ import ( usersvc "git.netcell-it.de/projekte/edgeguard-native/internal/services/users" ) -var version = "1.1.133" +var version = "1.1.134" func main() { addr := os.Getenv("EDGEGUARD_API_ADDR") diff --git a/cmd/edgeguard-ctl/main.go b/cmd/edgeguard-ctl/main.go index 6b48810..9584c11 100644 --- a/cmd/edgeguard-ctl/main.go +++ b/cmd/edgeguard-ctl/main.go @@ -11,7 +11,7 @@ import ( "git.netcell-it.de/projekte/edgeguard-native/internal/services/setup" ) -var version = "1.1.133" +var version = "1.1.134" const usage = `edgeguard-ctl — EdgeGuard CLI diff --git a/cmd/edgeguard-scheduler/main.go b/cmd/edgeguard-scheduler/main.go index 46706fd..ddc0938 100644 --- a/cmd/edgeguard-scheduler/main.go +++ b/cmd/edgeguard-scheduler/main.go @@ -41,7 +41,7 @@ import ( "git.netcell-it.de/projekte/edgeguard-native/internal/services/tlscerts" ) -var version = "1.1.133" +var version = "1.1.134" const ( // renewTickInterval — how often we re-evaluate expiring certs. diff --git a/management-ui/src/pages/Firewall/SystemRules.tsx b/management-ui/src/pages/Firewall/SystemRules.tsx index 2acdf20..214468f 100644 --- a/management-ui/src/pages/Firewall/SystemRules.tsx +++ b/management-ui/src/pages/Firewall/SystemRules.tsx @@ -39,6 +39,7 @@ interface SystemRule { const ROWS: SystemRule[] = [ { key: 'a1', chain: 'input', match: 'tcp dport 22 (rate-limit 10/min)', action: 'accept', note: 'anti-lockout: SSH' }, { key: 'a2', chain: 'input', match: 'tcp dport 443', action: 'accept', note: 'anti-lockout: HAProxy public HTTPS' }, + { key: 'a2u',chain: 'input', match: 'udp dport 443', action: 'accept', note: 'anti-lockout: HAProxy HTTP/3 (QUIC)' }, { key: 'a3', chain: 'input', match: 'tcp dport 3443', action: 'accept', note: 'anti-lockout: Management-UI (admin HTTPS)' }, { key: 'b1', chain: 'input', match: 'ct state established,related', action: 'accept', note: 'stateful baseline' }, { key: 'b2', chain: 'input', match: 'ct state invalid', action: 'drop', note: 'stateful baseline' },