diff options
Diffstat (limited to 'hosts/vidhar/ruleset.nft')
-rw-r--r-- | hosts/vidhar/ruleset.nft | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft index 2f8e7b57..57ac2716 100644 --- a/hosts/vidhar/ruleset.nft +++ b/hosts/vidhar/ruleset.nft | |||
@@ -59,10 +59,10 @@ table inet filter { | |||
59 | 59 | ||
60 | iifname lo counter accept | 60 | iifname lo counter accept |
61 | 61 | ||
62 | oifname {eno1, dsl} meta l4proto $icmp_protos jump forward_icmp_accept | 62 | oifname {lan, dsl} meta l4proto $icmp_protos jump forward_icmp_accept |
63 | 63 | ||
64 | iifname eno1 oifname dsl counter accept | 64 | iifname lan oifname dsl counter accept |
65 | iifname dsl oifname eno1 ct state {established, related} counter accept | 65 | iifname dsl oifname lan ct state {established, related} counter accept |
66 | 66 | ||
67 | 67 | ||
68 | 68 | ||
@@ -94,8 +94,8 @@ table inet filter { | |||
94 | tcp dport 22 counter accept | 94 | tcp dport 22 counter accept |
95 | udp dport 60001-61000 counter accept | 95 | udp dport 60001-61000 counter accept |
96 | 96 | ||
97 | iifname eno1 tcp dport 53 counter accept | 97 | iifname lan tcp dport 53 counter accept |
98 | iifname eno1 udp dport 53 counter accept | 98 | iifname lan udp dport 53 counter accept |
99 | 99 | ||
100 | meta protocol ip udp dport 51820 counter accept | 100 | meta protocol ip udp dport 51820 counter accept |
101 | meta protocol ip6 udp dport 51821 counter accept | 101 | meta protocol ip6 udp dport 51821 counter accept |
@@ -105,10 +105,10 @@ table inet filter { | |||
105 | 105 | ||
106 | iifname mgmt udp dport 123 counter accept | 106 | iifname mgmt udp dport 123 counter accept |
107 | 107 | ||
108 | iifname {eno1, mgmt} udp dport 67 counter accept | 108 | iifname {lan, mgmt} udp dport 67 counter accept |
109 | 109 | ||
110 | iifname eno1 udp dport { 137, 138, 3702 } counter accept | 110 | iifname lan udp dport { 137, 138, 3702 } counter accept |
111 | iifname eno1 tcp dport { 445, 139, 5357 } counter accept | 111 | iifname lan tcp dport { 445, 139, 5357 } counter accept |
112 | 112 | ||
113 | ct state {established, related} counter accept | 113 | ct state {established, related} counter accept |
114 | 114 | ||