bonjour ports & gfree-sync-list off (#3517)

* #3144 open additional Bonjour NAT ports
* #3144 remove sync-freelist=true from def lnd.conf
* #3251 remove sync-freelist=1 by lnd.check.sh
This commit is contained in:
/rootzoll 2022-12-14 10:55:33 +01:00 committed by GitHub
parent 1c26120056
commit 5a3b3f78d8
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 11 additions and 3 deletions

View file

@ -164,10 +164,15 @@ echo "allow: local web admin HTTPS"
ufw allow from 10.0.0.0/8 to any port 443 comment 'allow local LAN HTTPS' ufw allow from 10.0.0.0/8 to any port 443 comment 'allow local LAN HTTPS'
ufw allow from 172.16.0.0/12 to any port 443 comment 'allow local LAN HTTPS' ufw allow from 172.16.0.0/12 to any port 443 comment 'allow local LAN HTTPS'
ufw allow from 192.168.0.0/16 to any port 443 comment 'allow local LAN HTTPS' ufw allow from 192.168.0.0/16 to any port 443 comment 'allow local LAN HTTPS'
echo "open firewall for auto nat discover (see issue #129)" echo "open firewall for auto nat discover (see issue #129 & #3144)"
ufw allow proto udp from 10.0.0.0/8 port 1900 to any comment 'allow local LAN SSDP for UPnP discovery' ufw allow proto udp from 10.0.0.0/8 port 1900 to any comment 'allow local LAN SSDP for UPnP discovery'
ufw allow proto udp from 172.16.0.0/12 port 1900 to any comment 'allow local LAN SSDP for UPnP discovery' ufw allow proto udp from 172.16.0.0/12 port 1900 to any comment 'allow local LAN SSDP for UPnP discovery'
ufw allow proto udp from 192.168.0.0/16 port 1900 to any comment 'allow local LAN SSDP for UPnP discovery' ufw allow proto udp from 192.168.0.0/16 port 1900 to any comment 'allow local LAN SSDP for UPnP discovery'
ufw allow proto udp from 192.168.0.0/16 port 5350 to any comment 'Bonjour NAT'
ufw allow proto udp from 172.16.0.0/12 port 5350 to any comment 'Bonjour NAT'
ufw allow proto udp from 192.168.0.0/16 port 5351 to any comment 'Bonjour NAT'
ufw allow proto udp from 172.16.0.0/12 port 5351 to any comment 'Bonjour NAT'
echo "enable lazy firewall" echo "enable lazy firewall"
ufw --force enable ufw --force enable
echo "" echo ""

View file

@ -9,8 +9,6 @@ nat=false
# Avoid historical graph data sync # Avoid historical graph data sync
ignore-historical-gossip-filters=1 ignore-historical-gossip-filters=1
# Avoid slow startup time
sync-freelist=1
# Avoid high startup overhead # Avoid high startup overhead
stagger-initial-reconnect=1 stagger-initial-reconnect=1

View file

@ -63,6 +63,11 @@ if [ "$1" == "prestart" ]; then
##### APPLICATION OPTIONS SECTION ##### ##### APPLICATION OPTIONS SECTION #####
# remove sync-freelist=1 (use =true is you want to overrule raspiblitz)
# https://github.com/rootzoll/raspiblitz/issues/3251
sed -i "/^# Avoid slow startup time/d" ${lndConfFile}
sed -i "/^sync-freelist=1/d" ${lndConfFile}
# delete autounlock if passwordFile not present # delete autounlock if passwordFile not present
passwordFile="/mnt/hdd/lnd/data/chain/${network}/${CHAIN}/password.info" passwordFile="/mnt/hdd/lnd/data/chain/${network}/${CHAIN}/password.info"
if ! ls ${passwordFile} &>/dev/null; then if ! ls ${passwordFile} &>/dev/null; then