1 files changed, 15 insertions, 1 deletions

diff --git a/hosts/skadhi/networking/ruleset.nft b/hosts/skadhi/networking/ruleset.nft
index 62339f69..94e21b10 100644
--- a/hosts/skadhi/networking/ruleset.nft
+++ b/hosts/skadhi/networking/ruleset.nft
@@ -113,7 +113,21 @@ table inet filter {
     ct state new counter name reject-icmp-fw reject
   }
 
-  chain input_tmp {}
+  ct helper ftp-standard {
+    type "ftp" protocol tcp
+  }
+  chain input_pr_tmp {
+    # tcp dport 2121 ct helper set "ftp-standard"
+  }
+  chain input_pr {
+    type filter hook prerouting priority 0
+
+    jump input_pr_tmp
+  }
+
+  chain input_tmp {
+    # tcp dport 2121 accept
+  }
   chain input {
     type filter hook input priority filter
     policy drop