Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

https://docs.zerotier.com/zerotier/rules A network that can only be used for remote desktop.

Check the manual for more information.

Code Block
languagetext
accept ethertype arp; # so nodes can find each other
drop not ipprotocol tcp; 
accept dport 3389; # Destination is RDP
drop chr tcp_syn and not chr tcp_ack; # No new TCP connections (except RDP)
accept; # Accept what's left, returning RDP traffic

...

In particular, this has the disadvantage of blocking RDP’s UDP mode.

Locking down UDP