summaryrefslogtreecommitdiff
path: root/hosts
diff options
context:
space:
mode:
authorGregor Kleen <gkleen@yggdrasil.li>2021-12-09 09:32:26 +0100
committerGregor Kleen <gkleen@yggdrasil.li>2021-12-09 09:32:26 +0100
commitdb5eca7865cf71b8890f90632ed22a9b065d5373 (patch)
treeb43cc51d151f4038b9715b9c612abc81047ec437 /hosts
parent23923d7e463587ac9a82555b89d35e633560db32 (diff)
downloadnixos-db5eca7865cf71b8890f90632ed22a9b065d5373.tar
nixos-db5eca7865cf71b8890f90632ed22a9b065d5373.tar.gz
nixos-db5eca7865cf71b8890f90632ed22a9b065d5373.tar.bz2
nixos-db5eca7865cf71b8890f90632ed22a9b065d5373.tar.xz
nixos-db5eca7865cf71b8890f90632ed22a9b065d5373.zip
vidhar: nftables...
Diffstat (limited to 'hosts')
-rw-r--r--hosts/vidhar/ruleset.nft6
1 files changed, 4 insertions, 2 deletions
diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft
index f4e2aa94..f5de1bd1 100644
--- a/hosts/vidhar/ruleset.nft
+++ b/hosts/vidhar/ruleset.nft
@@ -72,13 +72,15 @@ table inet filter {
72 72
73 chain output { 73 chain output {
74 type filter hook output priority filter 74 type filter hook output priority filter
75 policy drop 75 policy accept
76
76 77
78 oifname lo counter accept
77 79
78 oifname != dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_local counter accept 80 oifname != dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_local counter accept
79 oifname dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_dsl counter accept 81 oifname dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_dsl counter accept
82 meta l4proto { ipv6-icmp, icmp, igmp } counter drop
80 83
81 meta l4proto != { ipv6-icmp, icmp, igmp } counter drop
82 84
83 counter 85 counter
84 } 86 }