diff options
| author | Gregor Kleen <gkleen@yggdrasil.li> | 2021-12-08 19:03:22 +0100 |
|---|---|---|
| committer | Gregor Kleen <gkleen@yggdrasil.li> | 2021-12-08 19:03:22 +0100 |
| commit | 96727fdd99f164e4f8d1afb4b24ddd11363f29d9 (patch) | |
| tree | e86133b1dac917620d2c82fc0db8f7fe9506e537 /hosts/vidhar | |
| parent | b27f24d4686b1fe67a351c9ebfece798a6adb0c2 (diff) | |
| download | nixos-96727fdd99f164e4f8d1afb4b24ddd11363f29d9.tar nixos-96727fdd99f164e4f8d1afb4b24ddd11363f29d9.tar.gz nixos-96727fdd99f164e4f8d1afb4b24ddd11363f29d9.tar.bz2 nixos-96727fdd99f164e4f8d1afb4b24ddd11363f29d9.tar.xz nixos-96727fdd99f164e4f8d1afb4b24ddd11363f29d9.zip | |
vidhar: nftables...
Diffstat (limited to 'hosts/vidhar')
| -rw-r--r-- | hosts/vidhar/ruleset.nft | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft index 8877f123..a4256e83 100644 --- a/hosts/vidhar/ruleset.nft +++ b/hosts/vidhar/ruleset.nft | |||
| @@ -21,6 +21,7 @@ table inet filter { | |||
| 21 | jump reject-rl | 21 | jump reject-rl |
| 22 | meta l4proto tcp ct state new counter reject with tcp reset | 22 | meta l4proto tcp ct state new counter reject with tcp reset |
| 23 | ct state new counter reject | 23 | ct state new counter reject |
| 24 | counter | ||
| 24 | } | 25 | } |
| 25 | 26 | ||
| 26 | chain input { | 27 | chain input { |
| @@ -49,6 +50,7 @@ table inet filter { | |||
| 49 | jump reject-rl | 50 | jump reject-rl |
| 50 | meta l4proto tcp ct state new counter reject with tcp reset | 51 | meta l4proto tcp ct state new counter reject with tcp reset |
| 51 | ct state new counter reject | 52 | ct state new counter reject |
| 53 | counter | ||
| 52 | } | 54 | } |
| 53 | 55 | ||
| 54 | chain output { | 56 | chain output { |