diff options
| -rw-r--r-- | hosts/vidhar/ruleset.nft | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft index f4e2aa94..f5de1bd1 100644 --- a/hosts/vidhar/ruleset.nft +++ b/hosts/vidhar/ruleset.nft | |||
| @@ -72,13 +72,15 @@ table inet filter { | |||
| 72 | 72 | ||
| 73 | chain output { | 73 | chain output { |
| 74 | type filter hook output priority filter | 74 | type filter hook output priority filter |
| 75 | policy drop | 75 | policy accept |
| 76 | |||
| 76 | 77 | ||
| 78 | oifname lo counter accept | ||
| 77 | 79 | ||
| 78 | oifname != dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_local counter accept | 80 | oifname != dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_local counter accept |
| 79 | oifname dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_dsl counter accept | 81 | oifname dsl meta l4proto { ipv6-icmp, icmp, igmp } limit name lim_icmp_dsl counter accept |
| 82 | meta l4proto { ipv6-icmp, icmp, igmp } counter drop | ||
| 80 | 83 | ||
| 81 | meta l4proto != { ipv6-icmp, icmp, igmp } counter drop | ||
| 82 | 84 | ||
| 83 | counter | 85 | counter |
| 84 | } | 86 | } |
