anchor.diff:                  ''
                     ip46tables -A INPUT -p udp --dport ${toString port} -j ACCEPT
                   ''
  -              ) config.networking.firewall.allowedUDPPorts
  +              ) cfg.allowedUDPPorts
               }
   
               # Accept IPv4 multicast.  Not a big security risk since
  
positive.code:       default = false;
        description =
          ''
            Whether to enable the firewall.
          '';
      };
    
  
negative.code:                 ''
                    ip46tables -A INPUT -p tcp --dport ${toString port} -j ACCEPT
                  ''
                ) cfg.allowedTCPPorts
              }
  
              # Accept packets on the allowed UDP ports.
  