diff options
Diffstat (limited to 'hosts')
| -rw-r--r-- | hosts/vidhar/ruleset.nft | 10 | 
1 files changed, 10 insertions, 0 deletions
| diff --git a/hosts/vidhar/ruleset.nft b/hosts/vidhar/ruleset.nft index 5263f97e..fec7b536 100644 --- a/hosts/vidhar/ruleset.nft +++ b/hosts/vidhar/ruleset.nft | |||
| @@ -21,6 +21,9 @@ table inet filter { | |||
| 21 | log prefix "reject forward: " counter | 21 | log prefix "reject forward: " counter | 
| 22 | meta l4proto tcp ct state new counter reject with tcp reset | 22 | meta l4proto tcp ct state new counter reject with tcp reset | 
| 23 | ct state new counter reject | 23 | ct state new counter reject | 
| 24 | |||
| 25 | |||
| 26 | counter | ||
| 24 | } | 27 | } | 
| 25 | 28 | ||
| 26 | chain input { | 29 | chain input { | 
| @@ -49,6 +52,9 @@ table inet filter { | |||
| 49 | log prefix "reject input: " counter | 52 | log prefix "reject input: " counter | 
| 50 | meta l4proto tcp ct state new counter reject with tcp reset | 53 | meta l4proto tcp ct state new counter reject with tcp reset | 
| 51 | ct state new counter reject | 54 | ct state new counter reject | 
| 55 | |||
| 56 | |||
| 57 | counter | ||
| 52 | } | 58 | } | 
| 53 | 59 | ||
| 54 | chain output { | 60 | chain output { | 
| @@ -64,8 +70,10 @@ table ip nat { | |||
| 64 | type nat hook postrouting priority srcnat | 70 | type nat hook postrouting priority srcnat | 
| 65 | policy accept | 71 | policy accept | 
| 66 | 72 | ||
| 73 | |||
| 67 | oifname dsl counter masquerade | 74 | oifname dsl counter masquerade | 
| 68 | 75 | ||
| 76 | |||
| 69 | counter | 77 | counter | 
| 70 | } | 78 | } | 
| 71 | } | 79 | } | 
| @@ -75,8 +83,10 @@ table inet mangle { | |||
| 75 | type filter hook postrouting priority mangle | 83 | type filter hook postrouting priority mangle | 
| 76 | policy accept | 84 | policy accept | 
| 77 | 85 | ||
| 86 | |||
| 78 | oifname dsl meta l4proto tcp tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu | 87 | oifname dsl meta l4proto tcp tcp flags & (syn|rst) == syn counter tcp option maxseg size set rt mtu | 
| 79 | 88 | ||
| 89 | |||
| 80 | counter | 90 | counter | 
| 81 | } | 91 | } | 
| 82 | } \ No newline at end of file | 92 | } \ No newline at end of file | 
