vidhar: nftables...

1 files changed, 6 insertions, 0 deletions

diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft
index fec7b536..85094647 100644
--- a/hosts/vidhar/ruleset.nft
+++ b/hosts/vidhar/ruleset.nft
@@ -9,6 +9,9 @@ table inet filter {
     policy drop
 
 
+    ct state invalid counter drop
+
+
     iifname eno1 oifname dsl counter accept
     iifname dsl oifname eno1 ct state {established, related} counter accept
 
@@ -31,6 +34,9 @@ table inet filter {
     policy drop
 
 
+    ct state invalid counter drop
+    
+
     iifname lo counter accept
     iif != lo ip daddr 127.0.0.1/8 counter reject
     iif != lo ip6 daddr ::1/128 counter reject