diff options
Diffstat (limited to 'installer/ruleset.nft')
| -rw-r--r-- | installer/ruleset.nft | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/installer/ruleset.nft b/installer/ruleset.nft index 803ce9fd..7b38a059 100644 --- a/installer/ruleset.nft +++ b/installer/ruleset.nft | |||
| @@ -60,7 +60,7 @@ table inet filter { | |||
| 60 | 60 | ||
| 61 | 61 | ||
| 62 | ct state invalid log level debug prefix "drop invalid input: " counter drop | 62 | ct state invalid log level debug prefix "drop invalid input: " counter drop |
| 63 | 63 | ||
| 64 | 64 | ||
| 65 | iifname lo counter accept | 65 | iifname lo counter accept |
| 66 | iif != lo ip daddr 127.0.0.1/8 counter reject | 66 | iif != lo ip daddr 127.0.0.1/8 counter reject |
| @@ -73,7 +73,7 @@ table inet filter { | |||
| 73 | udp dport 60000-61000 counter accept | 73 | udp dport 60000-61000 counter accept |
| 74 | 74 | ||
| 75 | 75 | ||
| 76 | ct state {established, related} counter name established-rx accept | 76 | ct state {established, related} counter accept |
| 77 | 77 | ||
| 78 | 78 | ||
| 79 | limit name lim_reject log level debug prefix "drop input: " counter drop | 79 | limit name lim_reject log level debug prefix "drop input: " counter drop |