From 6f4703c21fc71506fc852e2513e796bdeb9cedd0 Mon Sep 17 00:00:00 2001
From: serinko <97586125+serinko@users.noreply.github.com>
Date: Mon, 20 Jul 2026 14:36:11 +0200
Subject: [PATCH 1/2] add nip-13 ports and comment redundancy

---
 .../nym-node-setup/network-tunnel-manager.sh  | 71 ++++++++++++-------
 1 file changed, 47 insertions(+), 24 deletions(-)

diff --git a/scripts/nym-node-setup/network-tunnel-manager.sh b/scripts/nym-node-setup/network-tunnel-manager.sh
index 702bf55d011..93fbeba3088 100644
--- a/scripts/nym-node-setup/network-tunnel-manager.sh
+++ b/scripts/nym-node-setup/network-tunnel-manager.sh
@@ -863,11 +863,12 @@ apply_port_allowlist() {
     ["IMAP3"]="220"
     ["SSHAlternative1"]="223"
     ["LDAP"]="389"
+    ["Zoom1"]="390"
     ["HTTPS"]="443"
     ["SMBWindowsFileShare"]="445"
     ["Kpasswd"]="464"
     # this port is opened and rate limited in apply_smtps_465_rate_limit
-    # ["SMTP"]="465"
+    #["SMTP"]="465"
     ["RTSP"]="554"
     ["UseNet2"]="563"
     ["SMTPSubmission"]="587"
@@ -911,7 +912,9 @@ apply_port_allowlist() {
     ["XboxLive"]="3074"
     ["MySQL"]="3306"
     ["MoneroMiningPools1"]="3333"
-    ["SteamGaming1"]="3478-3480"
+    # Within WhatsAppRange
+    #["SteamGaming1"]="3478-3480"
+    ["WhatsAppRange"]="3478-3484"
     ["SVN"]="3690"
     ["WorldOfWorldcraft2"]="3724"
     ["WorldOfWorldcraft3"]="4000"
@@ -922,12 +925,15 @@ apply_port_allowlist() {
     ["RTPVOIP"]="5000-5005"
     ["MMCC"]="5050"
     ["WorldOfWorldcraft8"]="5060-5062"
+    ["Zoom2"]="5091"
     ["ICQ"]="5190"
     ["XMPP"]="5222-5223"
     ["AndroidMarket"]="5228"
     ["EufyTLS"]="5349"
     ["PostgreSQL"]="5432"
     ["WorldOfWorldcraft6"]="6012"
+    # Within WorldOfWorldcraft7
+    #["RainbowSixSiege1"]="6015"
     ["WorldOfWorldcraft7"]="6112-6120"
     ["WorldOfWorldcraft9"]="6250"
     ["WebSocket"]="6300"
@@ -942,7 +948,9 @@ apply_port_allowlist() {
     ["HTTPSALT"]="8443"
     ["EufyVideoStream"]="8554-8555"
     ["TeamSpeak"]="8767"
-    ["MQTTS"]="8883"
+    ["Zoom3"]="8801-8810"
+    # Within Zoom3
+    #["MQTTS"]="8883" 
     ["HTTPProxy"]="8888"
     ["WebSocketNym"]="9000"
     ["TorORPort"]="9001"
@@ -955,29 +963,44 @@ apply_port_allowlist() {
     ["Lightning"]="9735"
     ["TeamSpeakVoice"]="9987"
     ["DashNetwork"]="9999"
-    ["NDMP"]="10000"
-    ["TeamSpeakQuery"]="10011-10080"
+    # Within RainbowSixSiege2
+    #["NDMP"]="10000"
+    #["TeamSpeakQuery"]="10011-10080"
+    ["RainbowSixSiege2"]="10000-10099"
     ["TeamSpeakHTTPS"]="10443"
     ["OpenPGP"]="11371"
-    ["MoneroMiningPools3"]="14444"
-    ["Monero"]="18080-18081"
-    ["MoneroRPC"]="18089"
-    ["GoogleVoice"]="19294-19344"
-    ["EnsimControlPanel"]="19638"
-    ["Session"]="22021"
-    ["DarkFiTor"]="25551"
-    ["Minecraft"]="25565"
-    ["DarkFi"]="26661"
-    # ["MongoDBDefault"]="27017" # Within Steam range
-    ["Steam"]="27000-27050"
-    ["FiveMGameServer"]="30120"
-    ["WhatsAppRange"]="3478-3484"
-    ["TeamSpeakTSDNS"]="41144"
-    ["DiscordVoiceChat1"]="50000-65535"
-    # ["ElectrumSSL"]="50002"    # Within DiscordVoiceChat1 range
-    ["MOSH"]="60000-61000"
-    ["Mumble"]="64738"
-    ["Metadata"]="51830"
+    ["EpicGames1"]="12000-65000"
+    # Within EpicGames1
+    #["eufySecurity1"]="12306-12308"
+    #["RainbowSixSiege3"]="13000-13005"
+    #["RainbowSixSiege4"]="13200"
+    #["RainbowSixSiege5"]="14000-14024"
+    #["MoneroMiningPools3"]="14444"
+    #["Monero"]="18080-18081"
+    #["MoneroRPC"]="18089"
+    #["GoogleVoice"]="19294-19344"
+    #["EnsimControlPanel"]="19638"
+    #["Session"]="22021"
+    #["GenshinImpact1"]="22101-22102"
+    #["DarkFiTor"]="25551"
+    #["Minecraft"]="25565"
+    #["GoogleVoice1"]="26500-26501"
+    #["DarkFi"]="26661"
+    # Within Steam range
+    #["MongoDBDefault"]="27017" 
+    #["Steam"]="27000-27050"
+    #["GTAFiveM1"]="30110"
+    #["FiveMGameServer"]="30120"
+    #["GTAFiveM2"]="40120"
+    #["TeamSpeakTSDNS"]="41144"
+    #["GenshinImpact2"]="42472"    
+    #["DiscordVoiceChat1"]="50000-65535"
+    # Within DiscordVoiceChat1 range
+    #["Electrum2"]="50001" 
+    #["ElectrumSSL"]="50002"    
+    #["MOSH"]="60000-61000"
+    #["Mumble"]="64738"
+    #["Metadata"]="51830"
 
   )
 

From e7dec42af5e364ca59bf96bdd3d7cd59f71ba3bd Mon Sep 17 00:00:00 2001
From: serinko <97586125+serinko@users.noreply.github.com>
Date: Mon, 20 Jul 2026 14:37:01 +0200
Subject: [PATCH 2/2] add comment

---
 scripts/nym-node-setup/network-tunnel-manager.sh | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/scripts/nym-node-setup/network-tunnel-manager.sh b/scripts/nym-node-setup/network-tunnel-manager.sh
index 93fbeba3088..1f691f12717 100644
--- a/scripts/nym-node-setup/network-tunnel-manager.sh
+++ b/scripts/nym-node-setup/network-tunnel-manager.sh
@@ -847,7 +847,8 @@ apply_port_allowlist() {
   echo "applying allowed port list into ${NYM_CHAIN}"
 
   configure_exit_dns_and_icmp
-
+  
+  # keep redundant ports commented out for governance transparency
   declare -A PORT_MAPPINGS=(
     ["FTP"]="20-21"
     ["SSH"]="22"