From a9e7c81e3eaf239f3ca0867772c5e81669c6fd75 Mon Sep 17 00:00:00 2001
From: Zeph Levy <171337931+ZephLevy@users.noreply.github.com>
Date: Wed, 18 Mar 2026 11:22:48 +0100
Subject: [PATCH] Set firewall reverse path checking to strict

---
 nixos/configuration.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/nixos/configuration.nix b/nixos/configuration.nix
index f00ce9a..184914e 100644
--- a/nixos/configuration.nix
+++ b/nixos/configuration.nix
@@ -25,7 +25,7 @@
 
   networking.hostName = "TARS";
   networking.networkmanager.enable = true;
-  networking.firewall.checkReversePath = "loose";
+  networking.firewall.checkReversePath = "strict";
   networking.firewall.allowedTCPPorts = [ 53317 ];
   networking.firewall.allowedUDPPorts = [ 53317 ];