Add destination port ACL rules

2026-10-29 13:21:58 +00:00
parent 488f25491d
commit b8a1761a72
6 changed files with 302 additions and 37 deletions
@@ -49,7 +49,9 @@ acl:
 #       action: allow
 #       networks: ["127.0.0.1/32", "::1/128"]
 #       domains: ["example.com", "*.rust-lang.org"]
+#       ports: [80, 443]
 #
 # `*.example.com` matches subdomains but not `example.com` itself. Domain
 # patterns never match IP literals, and domain blacklists do not block direct
-# connections to destination IP addresses.
+# connections to destination IP addresses. `ports` restricts destination ports;
+# plain HTTP defaults to 80 when no port is specified.