diff options
| author | Your Name <you@example.com> | 2026-05-29 00:28:27 +0530 |
|---|---|---|
| committer | Your Name <you@example.com> | 2026-05-29 00:28:27 +0530 |
| commit | 57bcd53b14e1f795aa94b079c463d41ba8c02e94 (patch) | |
| tree | c7097430ecf961846c58931b897a63937f6cc1e1 /Makefile | |
| parent | 5e603764266568084eaae9ec0e0b130e7f233402 (diff) | |
fix(firewall): remove blanket TCP allow for unpaid clientsfeature/tollgate-core-v2
The sandbox_mint_access=true default allowed ALL TCP forwarding from
unpaid clients, completely bypassing the firewall. Fix:
- Remove the blanket TCP allow when sandbox_mint_access is set
- Only allow traffic to AP IP on specific ports (80, 2121, 4869, mining)
- Allow ICMP to AP IP for diagnostics
- Default sandbox_mint_access to false
- Add port 4869 (local relay) to allowed sandbox ports
Verified on Board B: unpaid clients blocked from internet, local
services (portal, API, relay) still accessible.
Diffstat (limited to 'Makefile')
0 files changed, 0 insertions, 0 deletions