nftables: ...

1 files changed, 2 insertions, 2 deletions

diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft
index 3d4d1bb0..ca0e5716 100644
--- a/hosts/vidhar/ruleset.nft
+++ b/hosts/vidhar/ruleset.nft
@@ -88,14 +88,14 @@ table inet filter {
     iifname != dsl meta l4proto $icmp_protos limit name lim_icmp_local counter drop
     meta l4proto $icmp_protos counter accept
 
-    ct state {established, related} counter accept
-
     tcp dport 22 counter accept
     meta protocol ip udp dport 51820 counter accept
     udp dport 60000-61000 counter accept
 
     iifname dsl meta protocol ip6 udp dport 546 udp sport 547 counter accept
 
+    ct state {established, related} counter accept
+
 
     limit name lim_reject log prefix "drop input: " counter drop
     log prefix "reject input: " counter