diff options
author | Gregor Kleen <gkleen@yggdrasil.li> | 2022-01-13 23:30:46 +0100 |
---|---|---|
committer | Gregor Kleen <gkleen@yggdrasil.li> | 2022-01-13 23:30:46 +0100 |
commit | 0bfb4903b649f70fbbffd2ec57bfe5114b612685 (patch) | |
tree | 81d4f2b79dc11fc29c09f08a444313319836c19d /hosts | |
parent | 6e7b9a0d1949bcec4848f1316cdf85b007978e37 (diff) | |
download | nixos-0bfb4903b649f70fbbffd2ec57bfe5114b612685.tar nixos-0bfb4903b649f70fbbffd2ec57bfe5114b612685.tar.gz nixos-0bfb4903b649f70fbbffd2ec57bfe5114b612685.tar.bz2 nixos-0bfb4903b649f70fbbffd2ec57bfe5114b612685.tar.xz nixos-0bfb4903b649f70fbbffd2ec57bfe5114b612685.zip |
vidhar: ...
Diffstat (limited to 'hosts')
-rw-r--r-- | hosts/vidhar/network/ruleset.nft | 17 |
1 files changed, 17 insertions, 0 deletions
diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft index c4c2fbe6..901ecb4f 100644 --- a/hosts/vidhar/network/ruleset.nft +++ b/hosts/vidhar/network/ruleset.nft | |||
@@ -248,11 +248,28 @@ table bridge filter { | |||
248 | policy drop | 248 | policy drop |
249 | 249 | ||
250 | 250 | ||
251 | log level debug prefix "bridge forward: " | ||
252 | |||
253 | |||
251 | ct state invalid log level debug prefix "drop invalid forward: " counter name invalid-fw drop | 254 | ct state invalid log level debug prefix "drop invalid forward: " counter name invalid-fw drop |
252 | 255 | ||
253 | iifname "wifibh01.lan" counter name wifibh-fw accept | 256 | iifname "wifibh01.lan" counter name wifibh-fw accept |
254 | iifname "eno2.lan" counter name lan-fw accept | 257 | iifname "eno2.lan" counter name lan-fw accept |
255 | } | 258 | } |
259 | |||
260 | chain input { | ||
261 | type filter hook input priority filter | ||
262 | policy accept | ||
263 | |||
264 | log level debug prefix "bridge input: " | ||
265 | } | ||
266 | |||
267 | chain output { | ||
268 | type filter hook output priority filter | ||
269 | policy accept | ||
270 | |||
271 | log level debug prefix "bridge output: " | ||
272 | } | ||
256 | } | 273 | } |
257 | 274 | ||
258 | table ip nat { | 275 | table ip nat { |