Clear Across Kansas

Allstar firewall

Any server that is directly on the Internet and does not have any forward firewall protection should have the firewall in the hamvoip code turned on (enabled) This can be done in the /usr/local/etc/allstar.env file by setting the firewall to “enabled” and rebooting. When enabled the necessary Allstar ports are allowed but everything else is blocked. Adjustments to rules (if you know what you are doing!) can be made in the rules in the /etc/openvpn/firewall file.