anchor.diff:                  ''
                     ip46tables -A INPUT -p udp --dport ${toString port} -j ACCEPT
                   ''
  -              ) config.networking.firewall.allowedUDPPorts
  +              ) cfg.allowedUDPPorts
               }
   
               # Accept IPv4 multicast.  Not a big security risk since
  
positive.code: { config, pkgs, ... }:
  
  with pkgs.lib;
  
negative.code: 
          preStart =
            ''
              # Helper command to manipulate both the IPv4 and IPv6 tables.
              ip46tables() {
                iptables "$@"
                ip6tables "$@"
  