diff options
Diffstat (limited to 'hosts/vidhar/ruleset.nft')
-rw-r--r-- | hosts/vidhar/ruleset.nft | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft index 3d4d1bb0..ca0e5716 100644 --- a/hosts/vidhar/ruleset.nft +++ b/hosts/vidhar/ruleset.nft | |||
@@ -88,14 +88,14 @@ table inet filter { | |||
88 | iifname != dsl meta l4proto $icmp_protos limit name lim_icmp_local counter drop | 88 | iifname != dsl meta l4proto $icmp_protos limit name lim_icmp_local counter drop |
89 | meta l4proto $icmp_protos counter accept | 89 | meta l4proto $icmp_protos counter accept |
90 | 90 | ||
91 | ct state {established, related} counter accept | ||
92 | |||
93 | tcp dport 22 counter accept | 91 | tcp dport 22 counter accept |
94 | meta protocol ip udp dport 51820 counter accept | 92 | meta protocol ip udp dport 51820 counter accept |
95 | udp dport 60000-61000 counter accept | 93 | udp dport 60000-61000 counter accept |
96 | 94 | ||
97 | iifname dsl meta protocol ip6 udp dport 546 udp sport 547 counter accept | 95 | iifname dsl meta protocol ip6 udp dport 546 udp sport 547 counter accept |
98 | 96 | ||
97 | ct state {established, related} counter accept | ||
98 | |||
99 | 99 | ||
100 | limit name lim_reject log prefix "drop input: " counter drop | 100 | limit name lim_reject log prefix "drop input: " counter drop |
101 | log prefix "reject input: " counter | 101 | log prefix "reject input: " counter |