reNixos/s0mePC-nix/networking/firewall.nix

{...}: {
  networking = {
    firewall = {
      allowPing = true;
      enable = true;
      checkReversePath = false;

      interfaces = {
        eno1 = rec {
          allowedTCPPortRanges = [
            {
              from = 1714;
              to = 1764;
            }
          ];

          allowedUDPPortRanges = allowedTCPPortRanges;
        };

        salt-hand7s-pc = rec {
          allowedTCPPorts = [
            6567
          ];

          allowedUDPPorts = allowedTCPPorts;
        };
      };
    };
  };
}