1 files changed, 7 insertions, 7 deletions

diff --git a/hosts/vidhar/network/ruleset.nft b/hosts/vidhar/network/ruleset.nft
index 4d829355..f6a2175c 100644
--- a/hosts/vidhar/network/ruleset.nft
+++ b/hosts/vidhar/network/ruleset.nft
@@ -136,7 +136,7 @@ table inet filter {
     oifname {lan, dsl} meta l4proto $icmp_protos jump forward_icmp_accept
 
     iifname lan oifname dsl counter name fw-lan accept
-    iifname dsl oifname lan ct state {established, related} counter name fw-dsl accept
+    iifname dsl oifname { lan, dmz01 } ct state {established, related} counter name fw-dsl accept
 
 
 
@@ -162,14 +162,14 @@ table inet filter {
     iifname != dsl meta l4proto $icmp_protos limit name lim_icmp_local counter name icmp-ratelimit-local-rx drop
     meta l4proto $icmp_protos counter name icmp-rx accept
 
-    tcp dport 22 counter name ssh-rx accept
-    udp dport 60001-61000 counter name mosh-rx accept
+    iifname { lan, mgmt, dsl } tcp dport 22 counter name ssh-rx accept
+    iifname { lan, mgmt, dsl } udp dport 60001-61000 counter name mosh-rx accept
 
-    iifname lan tcp dport 53 counter name dns-rx accept
-    iifname lan udp dport 53 counter name dns-rx accept
+    iifname { lan, mgmt, dmz01 } tcp dport 53 counter name dns-rx accept
+    iifname { lan, mgmt, dmz01 } udp dport 53 counter name dns-rx accept
 
-    meta protocol ip udp dport 51820 counter name wg-rx accept
-    meta protocol ip6 udp dport 51821 counter name wg-rx accept
+    iifname { lan, mgmt, dsl } meta protocol ip udp dport 51820 counter name wg-rx accept
+    iifname { lan, mgmt, dsl } meta protocol ip6 udp dport 51821 counter name wg-rx accept
     iifname "yggdrasil-wg-*" meta l4proto gre counter name yggdrasil-gre-rx accept
 
     iifname dsl meta protocol ip6 udp dport 546 udp sport 547 counter name ipv6-pd-rx accept