paulbsd/paulbsd-salt
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

updated nftables state
All checks were successful
continuous-integration/drone/push Build is passing
Details

Browse Source
This commit is contained in:
Paul 2023-06-10 10:08:50 +02:00
parent 66ab0ca998
commit f4c2da95af
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
states/nftables/templates/rules.nft.j2
View File

@ -11,6 +11,8 @@ add chain ip filter OUTPUT { type filter hook output priority 0; policy accept;
add chain ip filter DOCKER add chain ip filter DOCKER
add rule ip filter INPUT iifname lo counter accept add rule ip filter INPUT iifname lo counter accept
add rule ip filter INPUT iifname tun* counter accept add rule ip filter INPUT iifname tun* counter accept
add rule ip filter INPUT iifname br* counter accept
add rule ip filter INPUT iifname veth* counter accept
add rule ip filter INPUT ct state related,established counter accept add rule ip filter INPUT ct state related,established counter accept
add rule ip filter INPUT ip protocol icmp counter accept add rule ip filter INPUT ip protocol icmp counter accept
{%- for network in net.ip_networks+net.optional_ip_networks %} {%- for network in net.ip_networks+net.optional_ip_networks %}