diff options
Diffstat (limited to 'hosts/vidhar/printing/ruleset.nft')
-rw-r--r-- | hosts/vidhar/printing/ruleset.nft | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/hosts/vidhar/printing/ruleset.nft b/hosts/vidhar/printing/ruleset.nft index c3027567..e47256c3 100644 --- a/hosts/vidhar/printing/ruleset.nft +++ b/hosts/vidhar/printing/ruleset.nft | |||
@@ -44,6 +44,7 @@ table inet filter { | |||
44 | counter fw-printer {} | 44 | counter fw-printer {} |
45 | counter fw-host {} | 45 | counter fw-host {} |
46 | 46 | ||
47 | counter icmp-fw {} | ||
47 | counter icmp-ratelimit-fw {} | 48 | counter icmp-ratelimit-fw {} |
48 | 49 | ||
49 | counter reject-ratelimit-fw {} | 50 | counter reject-ratelimit-fw {} |
@@ -97,9 +98,9 @@ table inet filter { | |||
97 | meta l4proto $icmp_protos counter name icmp-fw accept | 98 | meta l4proto $icmp_protos counter name icmp-fw accept |
98 | 99 | ||
99 | 100 | ||
100 | iifname printer oifname eth0 ip daddr 10.141.4.0 meta l4proto . th dport { tcp . 53, udp . 53, udp . 123 } counter fw-printer accept | 101 | iifname printer oifname eth0 ip daddr 10.141.5.0 meta l4proto . th dport { tcp . 53, udp . 53, udp . 123 } counter name fw-printer accept |
101 | iifname printer oifname eth0 ip6 daddr 2a03:4000:52:ada:4:: meta l4proto . th dport { tcp . 53, udp . 53, udp . 123 } counter fw-printer accept | 102 | iifname printer oifname eth0 ip6 daddr 2a03:4000:52:ada:5:: meta l4proto . th dport { tcp . 53, udp . 53, udp . 123 } counter name fw-printer accept |
102 | iifname eth0 oifname printer counter fw-host accept | 103 | iifname eth0 oifname printer counter name fw-host accept |
103 | 104 | ||
104 | 105 | ||
105 | limit name lim_reject log level debug prefix "drop forward: " counter name reject-ratelimit-fw drop | 106 | limit name lim_reject log level debug prefix "drop forward: " counter name reject-ratelimit-fw drop |
@@ -127,8 +128,8 @@ table inet filter { | |||
127 | meta l4proto $icmp_protos counter name icmp-rx accept | 128 | meta l4proto $icmp_protos counter name icmp-rx accept |
128 | 129 | ||
129 | 130 | ||
130 | ip6 saddr 2a03:4000:52:ada:4:: tcp dport 631 counter name cups-rx accept | 131 | ip6 saddr 2a03:4000:52:ada:5:: tcp dport 631 counter name cups-rx accept |
131 | ip saddr 10.141.4.0 tcp dport 631 counter name cups-rx accept | 132 | ip saddr 10.141.5.0 tcp dport 631 counter name cups-rx accept |
132 | 133 | ||
133 | ct state {established, related} counter name established-rx accept | 134 | ct state {established, related} counter name established-rx accept |
134 | 135 | ||