diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2026-08-20 20:47:55 +0200 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2026-08-20 20:47:55 +0200 |
| commit | dfe1a3bb714cfec043b69011ac18972e5e35eaed (patch) | |
| tree | 8098d89f987cfe644cd820ed42f8b03da4a73395 /hosts/vidhar/network/ruleset.nft | |
| parent | b3e536c38740be36515904f19e1b43057ae9ad44 (diff) | |
| download | nixos-dfe1a3bb714cfec043b69011ac18972e5e35eaed.tar nixos-dfe1a3bb714cfec043b69011ac18972e5e35eaed.tar.gz nixos-dfe1a3bb714cfec043b69011ac18972e5e35eaed.tar.bz2 nixos-dfe1a3bb714cfec043b69011ac18972e5e35eaed.tar.xz nixos-dfe1a3bb714cfec043b69011ac18972e5e35eaed.zip | |
...flakes
Diffstat (limited to 'hosts/vidhar/network/ruleset.nft')
| -rw-r--r-- | hosts/vidhar/network/ruleset.nft | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft index 5df73e2f..f7182c87 100644 --- a/hosts/vidhar/network/ruleset.nft +++ b/hosts/vidhar/network/ruleset.nft | |||
| @@ -156,7 +156,9 @@ table inet filter { | |||
| 156 | 156 | ||
| 157 | iifname lo counter name fw-lo accept | 157 | iifname lo counter name fw-lo accept |
| 158 | 158 | ||
| 159 | oifname { lan, @pppInterface@, bifrost } meta l4proto $icmp_protos jump forward_icmp_accept | 159 | iifname lan oifname { @pppInterface@, bifrost } meta l4proto $icmp_protos jump forward_icmp_accept |
| 160 | iifname bifrost oifname ve-kimai meta l4proto $icmp_protos jump forward_icmp_accept | ||
| 161 | iifname ve-kimai oifname bifrost meta l4proto $icmp_protos jump forward_icmp_accept | ||
| 160 | iifname lan oifname { @pppInterface@, bifrost } counter name fw-lan accept | 162 | iifname lan oifname { @pppInterface@, bifrost } counter name fw-lan accept |
| 161 | iifname ve-kimai oifname @pppInterface@ counter name fw-kimai accept | 163 | iifname ve-kimai oifname @pppInterface@ counter name fw-kimai accept |
| 162 | iifname podman0 ip saddr 10.88.0.5 oifname @pppInterface@ counter name fw-podman accept | 164 | iifname podman0 ip saddr 10.88.0.5 oifname @pppInterface@ counter name fw-podman accept |