surtr: nftables...

1 files changed, 3 insertions, 8 deletions

diff --git a/hosts/surtr/ruleset.nft b/hosts/surtr/ruleset.nft
index f353d855..0a6e75a6 100644
--- a/hosts/surtr/ruleset.nft
+++ b/hosts/surtr/ruleset.nft
@@ -1,19 +1,15 @@
 define icmp_protos = { ipv6-icmp, icmp, igmp }
 
 table arp filter {
-  limit lim_arp_local {
+  limit lim_arp {
     rate over 50 mbytes/second burst 50 mbytes
   }
-  limit lim_arp_dsl {
-    rate over 1400 kbytes/second burst 1400 kbytes
-  }
 
   chain input {
     type filter hook input priority filter
     policy accept
 
-    iifname != dsl limit name lim_arp_local counter drop
-    iifname dsl limit name lim_arp_dsl counter drop
+    limit name lim_arp counter drop
 
     counter
   }
@@ -22,8 +18,7 @@ table arp filter {
     type filter hook output priority filter
     policy accept
 
-    oifname != dsl limit name lim_arp_local counter drop
-    oifname dsl limit name lim_arp_dsl counter drop
+    limit name lim_arp counter drop
 
     counter
   }