#!/bin/bash
#
# Open firewall ports for TURN server on Tabertron
#
# Usage: sudo bash open-turn-firewall.sh
#
set -e
if [ "$EUID" -ne 0 ]; then
echo "Please run as root: sudo bash open-turn-firewall.sh"
exit 1
fi
echo "🔥 Opening firewall ports for TURN server..."
# Allow TURN main port (UDP/TCP)
iptables -A INPUT -p udp --dport 3478 -j ACCEPT
iptables -A INPUT -p tcp --dport 3478 -j ACCEPT
# Allow TURN TLS port
iptables -A INPUT -p tcp --dport 5349 -j ACCEPT
# Allow TURN relay port range
iptables -A INPUT -p udp --dport 49152:65535 -j ACCEPT
echo "✅ Firewall rules added!"
echo ""
echo "Allowed ports:"
echo " - 3478 (UDP/TCP) - TURN main port"
echo " - 5349 (TCP) - TURN TLS"
echo " - 49152-65535 (UDP) - TURN relay range"
echo ""