From f5ea9786f7501e8fcebc17a2367bf840e886f3f5 Mon Sep 17 00:00:00 2001
From: devdatt <shreebhattji@urmic.org>
Date: Sat, 27 Dec 2025 14:19:01 +0530
Subject: [PATCH] ufw

---
 encoder/firewall.php | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/encoder/firewall.php b/encoder/firewall.php
index 27291e8..ca8feea 100644
--- a/encoder/firewall.php
+++ b/encoder/firewall.php
@@ -24,6 +24,10 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST') {
     exec("sudo ufw reset");
     exec("sudo ufw default allow outgoing");
     exec("sudo ufw default deny incoming");
+    exec("sudo ufw allow from 172.16.111.112 to 172.16.111.111 port 8080");
+    exec("sudo ufw allow proto udp to 224.0.0.0/4");
+    exec("sudo ufw route allow proto udp to 224.0.0.0/4");
+    exec("sudo ufw deny out to 239.255.254.254 port 39000 proto udp");
 
     foreach ($defaults as $port => $_) {
         $data[$port] = trim($_POST["port_$port"] ?? '');