From 130e46a15020e5b88898ad45a500982135e0a786 Mon Sep 17 00:00:00 2001
From: Gregor Kleen <gkleen@yggdrasil.li>
Date: Mon, 5 Oct 2026 13:36:42 +0200
Subject: ...

---
 hosts/skadhi/networking/ruleset.nft | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

(limited to 'hosts')

diff --git a/hosts/skadhi/networking/ruleset.nft b/hosts/skadhi/networking/ruleset.nft
index 62339f69..94e21b10 100644
--- a/hosts/skadhi/networking/ruleset.nft
+++ b/hosts/skadhi/networking/ruleset.nft
@@ -113,7 +113,21 @@ table inet filter {
     ct state new counter name reject-icmp-fw reject
   }
 
-  chain input_tmp {}
+  ct helper ftp-standard {
+    type "ftp" protocol tcp
+  }
+  chain input_pr_tmp {
+    # tcp dport 2121 ct helper set "ftp-standard"
+  }
+  chain input_pr {
+    type filter hook prerouting priority 0
+
+    jump input_pr_tmp
+  }
+
+  chain input_tmp {
+    # tcp dport 2121 accept
+  }
   chain input {
     type filter hook input priority filter
     policy drop
-- 
cgit v1.2.3